{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-6914", "assignerOrgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "state": "PUBLISHED", "assignerShortName": "WSO2", "dateReserved": "2024-07-19T10:14:31.390Z", "datePublished": "2025-05-22T18:26:15.042Z", "dateUpdated": "2025-08-27T21:34:47.372Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "WSO2 API Manager", "vendor": "WSO2", "versions": [{"lessThan": "2.2.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "2.2.0.55", "status": "affected", "version": "2.2.0", "versionType": "custom"}, {"lessThan": "2.5.0.82", "status": "affected", "version": "2.5.0", "versionType": "custom"}, {"lessThan": "2.6.0.141", "status": "affected", "version": "2.6.0", "versionType": "custom"}, {"lessThan": "3.0.0.161", "status": "affected", "version": "3.0.0", "versionType": "custom"}, {"lessThan": "3.1.0.292", "status": "affected", "version": "3.1.0", "versionType": "custom"}, {"lessThan": "3.2.0.382", "status": "affected", "version": "3.2.0", "versionType": "custom"}, {"lessThan": "3.2.1.14", "status": "affected", "version": "3.2.1", "versionType": "custom"}, {"lessThan": "4.0.0.304", "status": "affected", "version": "4.0.0", "versionType": "custom"}, {"lessThan": "4.1.0.164", "status": "affected", "version": "4.1.0", "versionType": "custom"}, {"lessThan": "4.2.0.99", "status": "affected", "version": "4.2.0", "versionType": "custom"}, {"lessThan": "4.3.0.15", "status": "affected", "version": "4.3.0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "WSO2 Governance Registry", "vendor": "WSO2", "versions": [{"lessThan": "5.4.0.14", "status": "affected", "version": "5.4.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Identity Server", "vendor": "WSO2", "versions": [{"lessThan": "5.3.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "5.3.0.31", "status": "affected", "version": "5.3.0", "versionType": "custom"}, {"lessThan": "5.4.0.30", "status": "affected", "version": "5.4.0", "versionType": "custom"}, {"lessThan": "5.4.1.35", "status": "affected", "version": "5.4.1", "versionType": "custom"}, {"lessThan": "5.5.0.48", "status": "affected", "version": "5.5.0", "versionType": "custom"}, {"lessThan": "5.6.0.56", "status": "affected", "version": "5.6.0", "versionType": "custom"}, {"lessThan": "5.7.0.122", "status": "affected", "version": "5.7.0", "versionType": "custom"}, {"lessThan": "5.8.0.104", "status": "affected", "version": "5.8.0", "versionType": "custom"}, {"lessThan": "5.9.0.155", "status": "affected", "version": "5.9.0", "versionType": "custom"}, {"lessThan": "5.10.0.317", "status": "affected", "version": "5.10.0", "versionType": "custom"}, {"lessThan": "5.11.0.363", "status": "affected", "version": "5.11.0", "versionType": "custom"}, {"lessThan": "6.0.0.207", "status": "affected", "version": "6.0.0", "versionType": "custom"}, {"lessThan": "6.1.0.184", "status": "affected", "version": "6.1.0", "versionType": "custom"}, {"lessThan": "7.0.0.56", "status": "affected", "version": "7.0.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Identity Server as Key Manager", "vendor": "WSO2", "versions": [{"lessThan": "5.3.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "5.3.0.36", "status": "affected", "version": "5.3.0", "versionType": "custom"}, {"lessThan": "5.5.0.49", "status": "affected", "version": "5.5.0", "versionType": "custom"}, {"lessThan": "5.6.0.70", "status": "affected", "version": "5.6.0", "versionType": "custom"}, {"lessThan": "5.7.0.121", "status": "affected", "version": "5.7.0", "versionType": "custom"}, {"lessThan": "5.9.0.162", "status": "affected", "version": "5.9.0", "versionType": "custom"}, {"lessThan": "5.10.0.311", "status": "affected", "version": "5.10.0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "WSO2 IoT", "vendor": "WSO2", "versions": [{"lessThan": "3.3.0.59", "status": "affected", "version": "3.3.0", "versionType": "custom"}, {"lessThan": "3.3.1.61", "status": "affected", "version": "3.3.1", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Open Banking AM", "vendor": "WSO2", "versions": [{"lessThan": "1.3.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "1.3.0.130", "status": "affected", "version": "1.3.0", "versionType": "custom"}, {"lessThan": "1.4.0.133", "status": "affected", "version": "1.4.0", "versionType": "custom"}, {"lessThan": "1.5.0.135", "status": "affected", "version": "1.5.0", "versionType": "custom"}, {"lessThan": "2.0.0.341", "status": "affected", "version": "2.0.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Open banking KM", "vendor": "WSO2", "versions": [{"lessThan": "1.3.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "1.3.0.113", "status": "affected", "version": "1.3.0", "versionType": "custom"}, {"lessThan": "1.4.0.129", "status": "affected", "version": "1.4.0", "versionType": "custom"}, {"lessThan": "1.5.0.119", "status": "affected", "version": "1.5.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Open Banking IAM", "vendor": "WSO2", "versions": [{"lessThan": "2.0.0.362", "status": "affected", "version": "2.0.0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.mgt", "product": "WSO2 Carbon Identity Management", "vendor": "WSO2", "versions": [{"lessThan": "5.7.5.9", "status": "affected", "version": "5.7.5", "versionType": "custom"}, {"lessThan": "5.10.86.4", "status": "affected", "version": "5.10.86", "versionType": "custom"}, {"lessThan": "5.10.112.14", "status": "affected", "version": "5.10.112", "versionType": "custom"}, {"lessThan": "5.11.148.13", "status": "affected", "version": "5.11.148", "versionType": "custom"}, {"lessThan": "5.11.256.15", "status": "affected", "version": "5.11.256", "versionType": "custom"}, {"lessThan": "5.12.153.58", "status": "affected", "version": "5.12.153", "versionType": "custom"}, {"lessThan": "5.12.387.41", "status": "affected", "version": "5.12.387", "versionType": "custom"}, {"lessThan": "5.14.97.75", "status": "affected", "version": "5.14.97", "versionType": "custom"}, {"lessThan": "5.17.5.282", "status": "affected", "version": "5.17.5", "versionType": "custom"}, {"lessThan": "5.17.118.4", "status": "affected", "version": "5.17.118", "versionType": "custom"}, {"lessThan": "5.18.187.265", "status": "affected", "version": "5.18.187", "versionType": "custom"}, {"lessThan": "5.18.248.14", "status": "affected", "version": "5.18.248", "versionType": "custom"}, {"lessThan": "5.23.8.184", "status": "affected", "version": "5.23.8", "versionType": "custom"}, {"lessThan": "5.24.8.6", "status": "affected", "version": "5.24.8", "versionType": "custom"}, {"lessThan": "5.25.92.92", "status": "affected", "version": "5.25.92", "versionType": "custom"}, {"lessThan": "5.25.705.6", "status": "affected", "version": "5.25.705", "versionType": "custom"}, {"lessThan": "7.0.78.32", "status": "affected", "version": "7.0.78", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3.44", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "Anonymous working with Trend Micro Zero Day Initiative"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a complete account takeover, including accounts with elevated privileges.<br><br>This vulnerability is exploitable only through the account recovery SOAP admin services exposed via the \"/services\" context path in affected products. The impact may be reduced if access to these endpoints has been restricted based on the \"<b>Security Guidelines for Production Deployment</b>\" by disabling exposure to untrusted networks."}], "value": "An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a complete account takeover, including accounts with elevated privileges.\n\nThis vulnerability is exploitable only through the account recovery SOAP admin services exposed via the \"/services\" context path in affected products. The impact may be reduced if access to these endpoints has been restricted based on the \"Security Guidelines for Production Deployment\" by disabling exposure to untrusted networks."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "When \"Security Guidelines for Production Deployment\" are not followed and \"/services\" context is public exposed (Worst Case)"}]}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "When \"Security Guidelines for Production Deployment\" are followed and \"/services\" context is only accessible by trusted networks"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-863", "description": "CWE-863 Incorrect Authorization", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "shortName": "WSO2", "dateUpdated": "2025-05-22T18:26:15.042Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3561/"}, {"tags": ["related"], "url": "https://security.docs.wso2.com/en/latest/security-guidelines/security-guidelines-for-production-deployment/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: transparent;\">Follow the instructions given on </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3561/#solution\"><span style=\"background-color: transparent;\">https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3561/#solution</span></a> <br>"}], "value": "Follow the instructions given on https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3561/#solution https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3561/#solution"}], "source": {"advisory": "WSO2-2024-3561", "discovery": "EXTERNAL"}, "title": "Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-05-22T18:37:41.259041Z", "id": "CVE-2024-6914", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-27T21:34:47.372Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-6914", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-05-22T18:37:41.259041Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-22T18:37:43.179Z"}}], "cna": {"title": "Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover", "source": {"advisory": "WSO2-2024-3561", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "value": "Anonymous working with Trend Micro Zero Day Initiative"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "When \"Security Guidelines for Production Deployment\" are not followed and \"/services\" context is public exposed (Worst Case)"}]}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "When \"Security Guidelines for Production Deployment\" are followed and \"/services\" context is only accessible by trusted networks"}]}], "affected": [{"vendor": "WSO2", "product": "WSO2 API Manager", "versions": [{"status": "unknown", "version": "0", "lessThan": "2.2.0", "versionType": "custom"}, {"status": "affected", "version": "2.2.0", "lessThan": "2.2.0.55", "versionType": "custom"}, {"status": "affected", "version": "2.5.0", "lessThan": "2.5.0.82", "versionType": "custom"}, {"status": "affected", "version": "2.6.0", "lessThan": "2.6.0.141", "versionType": "custom"}, {"status": "affected", "version": "3.0.0", "lessThan": "3.0.0.161", "versionType": "custom"}, {"status": "affected", "version": "3.1.0", "lessThan": "3.1.0.292", "versionType": "custom"}, {"status": "affected", "version": "3.2.0", "lessThan": "3.2.0.382", "versionType": "custom"}, {"status": "affected", "version": "3.2.1", "lessThan": "3.2.1.14", "versionType": "custom"}, {"status": "affected", "version": "4.0.0", "lessThan": "4.0.0.304", "versionType": "custom"}, {"status": "affected", "version": "4.1.0", "lessThan": "4.1.0.164", "versionType": "custom"}, {"status": "affected", "version": "4.2.0", "lessThan": "4.2.0.99", "versionType": "custom"}, {"status": "affected", "version": "4.3.0", "lessThan": "4.3.0.15", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Governance Registry", "versions": [{"status": "affected", "version": "5.4.0", "lessThan": "5.4.0.14", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Identity Server", "versions": [{"status": "unknown", "version": "0", "lessThan": "5.3.0", "versionType": "custom"}, {"status": "affected", "version": "5.3.0", "lessThan": "5.3.0.31", "versionType": "custom"}, {"status": "affected", "version": "5.4.0", "lessThan": "5.4.0.30", "versionType": "custom"}, {"status": "affected", "version": "5.4.1", "lessThan": "5.4.1.35", "versionType": "custom"}, {"status": "affected", "version": "5.5.0", "lessThan": "5.5.0.48", "versionType": "custom"}, {"status": "affected", "version": "5.6.0", "lessThan": "5.6.0.56", "versionType": "custom"}, {"status": "affected", "version": "5.7.0", "lessThan": "5.7.0.122", "versionType": "custom"}, {"status": "affected", "version": "5.8.0", "lessThan": "5.8.0.104", "versionType": "custom"}, {"status": "affected", "version": "5.9.0", "lessThan": "5.9.0.155", "versionType": "custom"}, {"status": "affected", "version": "5.10.0", "lessThan": "5.10.0.317", "versionType": "custom"}, {"status": "affected", "version": "5.11.0", "lessThan": "5.11.0.363", "versionType": "custom"}, {"status": "affected", "version": "6.0.0", "lessThan": "6.0.0.207", "versionType": "custom"}, {"status": "affected", "version": "6.1.0", "lessThan": "6.1.0.184", "versionType": "custom"}, {"status": "affected", "version": "7.0.0", "lessThan": "7.0.0.56", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Identity Server as Key Manager", "versions": [{"status": "unknown", "version": "0", "lessThan": "5.3.0", "versionType": "custom"}, {"status": "affected", "version": "5.3.0", "lessThan": "5.3.0.36", "versionType": "custom"}, {"status": "affected", "version": "5.5.0", "lessThan": "5.5.0.49", "versionType": "custom"}, {"status": "affected", "version": "5.6.0", "lessThan": "5.6.0.70", "versionType": "custom"}, {"status": "affected", "version": "5.7.0", "lessThan": "5.7.0.121", "versionType": "custom"}, {"status": "affected", "version": "5.9.0", "lessThan": "5.9.0.162", "versionType": "custom"}, {"status": "affected", "version": "5.10.0", "lessThan": "5.10.0.311", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 IoT", "versions": [{"status": "affected", "version": "3.3.0", "lessThan": "3.3.0.59", "versionType": "custom"}, {"status": "affected", "version": "3.3.1", "lessThan": "3.3.1.61", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Open Banking AM", "versions": [{"status": "unknown", "version": "0", "lessThan": "1.3.0", "versionType": "custom"}, {"status": "affected", "version": "1.3.0", "lessThan": "1.3.0.130", "versionType": "custom"}, {"status": "affected", "version": "1.4.0", "lessThan": "1.4.0.133", "versionType": "custom"}, {"status": "affected", "version": "1.5.0", "lessThan": "1.5.0.135", "versionType": "custom"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.0.341", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Open banking KM", "versions": [{"status": "unknown", "version": "0", "lessThan": "1.3.0", "versionType": "custom"}, {"status": "affected", "version": "1.3.0", "lessThan": "1.3.0.113", "versionType": "custom"}, {"status": "affected", "version": "1.4.0", "lessThan": "1.4.0.129", "versionType": "custom"}, {"status": "affected", "version": "1.5.0", "lessThan": "1.5.0.119", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Open Banking IAM", "versions": [{"status": "affected", "version": "2.0.0", "lessThan": "2.0.0.362", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Carbon Identity Management", "versions": [{"status": "affected", "version": "5.7.5", "lessThan": "5.7.5.9", "versionType": "custom"}, {"status": "affected", "version": "5.10.86", "lessThan": "5.10.86.4", "versionType": "custom"}, {"status": "affected", "version": "5.10.112", "lessThan": "5.10.112.14", "versionType": "custom"}, {"status": "affected", "version": "5.11.148", "lessThan": "5.11.148.13", "versionType": "custom"}, {"status": "affected", "version": "5.11.256", "lessThan": "5.11.256.15", "versionType": "custom"}, {"status": "affected", "version": "5.12.153", "lessThan": "5.12.153.58", "versionType": "custom"}, {"status": "affected", "version": "5.12.387", "lessThan": "5.12.387.41", "versionType": "custom"}, {"status": "affected", "version": "5.14.97", "lessThan": "5.14.97.75", "versionType": "custom"}, {"status": "affected", "version": "5.17.5", "lessThan": "5.17.5.282", "versionType": "custom"}, {"status": "affected", "version": "5.17.118", "lessThan": "5.17.118.4", "versionType": "custom"}, {"status": "affected", "version": "5.18.187", "lessThan": "5.18.187.265", "versionType": "custom"}, {"status": "affected", "version": "5.18.248", "lessThan": "5.18.248.14", "versionType": "custom"}, {"status": "affected", "version": "5.23.8", "lessThan": "5.23.8.184", "versionType": "custom"}, {"status": "affected", "version": "5.24.8", "lessThan": "5.24.8.6", "versionType": "custom"}, {"status": "affected", "version": "5.25.92", "lessThan": "5.25.92.92", "versionType": "custom"}, {"status": "affected", "version": "5.25.705", "lessThan": "5.25.705.6", "versionType": "custom"}, {"status": "affected", "version": "7.0.78", "lessThan": "7.0.78.32", "versionType": "custom"}, {"status": "unaffected", "version": "7.3.44", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.mgt", "defaultStatus": "unknown"}], "solutions": [{"lang": "en", "value": "Follow the instructions given on https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3561/#solution https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3561/#solution", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: transparent;\">Follow the instructions given on </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3561/#solution\"><span style=\"background-color: transparent;\">https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3561/#solution</span></a> <br>", "base64": false}]}], "references": [{"url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3561/", "tags": ["vendor-advisory"]}, {"url": "https://security.docs.wso2.com/en/latest/security-guidelines/security-guidelines-for-production-deployment/", "tags": ["related"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a complete account takeover, including accounts with elevated privileges.\n\nThis vulnerability is exploitable only through the account recovery SOAP admin services exposed via the \"/services\" context path in affected products. The impact may be reduced if access to these endpoints has been restricted based on the \"Security Guidelines for Production Deployment\" by disabling exposure to untrusted networks.", "supportingMedia": [{"type": "text/html", "value": "An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a complete account takeover, including accounts with elevated privileges.<br><br>This vulnerability is exploitable only through the account recovery SOAP admin services exposed via the \"/services\" context path in affected products. The impact may be reduced if access to these endpoints has been restricted based on the \"<b>Security Guidelines for Production Deployment</b>\" by disabling exposure to untrusted networks.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-863", "description": "CWE-863 Incorrect Authorization"}]}], "providerMetadata": {"orgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "shortName": "WSO2", "dateUpdated": "2025-05-22T18:26:15.042Z"}}}, "cveMetadata": {"cveId": "CVE-2024-6914", "state": "PUBLISHED", "dateUpdated": "2025-08-27T21:34:47.372Z", "dateReserved": "2024-07-19T10:14:31.390Z", "assignerOrgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "datePublished": "2025-05-22T18:26:15.042Z", "assignerShortName": "WSO2"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wso2:api_manager:2.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "6819491F-C6C3-41C1-B27A-0D0B62224977", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:2.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "0D57C8CF-084D-4142-9AF1-7C9F1261A3BD", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:2.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "BC168B6A-B15A-4C3B-A38D-C0B65F24F333", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "8FF14774-8935-4FC9-B5C8-9771B3D6EBFD", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:3.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "1344FB79-0796-445C-A8F3-C03E995925D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:3.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "E31E32CD-497E-4EF5-B3FC-8718EE06EDAD", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:3.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "B58251E8-606B-47C8-8E50-9F9FC8C179BD", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "E21D7ABF-C328-425D-B914-618C7628220B", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.1.0:-:*:*:*:*:*:*", "matchCriteriaId": "51465410-6B7C-40FD-A1AB-A14F650A6AC8", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.2.0:-:*:*:*:*:*:*", "matchCriteriaId": "851470CC-22AB-43E4-9CC6-5E22D49B3572", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.3.0:-:*:*:*:*:*:*", "matchCriteriaId": "9EBAB99E-6F0F-4CE9-A954-E8878826304C", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "0375C318-ECD2-4657-A0D7-4A0708266FBE", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "B9E7D773-A7CE-4AB8-828B-C2E7DC2799AD", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "CEA63B98-D4B4-4FCD-A869-FE64BC21A1B6", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "8DA0050E-D5DD-45E5-9F61-DC1BB060EFF0", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "26542F95-73F3-4906-838E-A66F5DC9DFA5", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "60781FE4-38A3-4FEA-9D8B-CADE4B535974", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "2B169832-A746-49A6-8E92-06624AA9B13A", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "981D701D-E381-484A-9614-CD0EF0331071", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "F4F126CA-A2F9-44F4-968B-DF71765869E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.11.0:*:*:*:*:*:*:*", "matchCriteriaId": "2153AECE-020A-4C01-B2A6-F9F5D98E7EBE", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server:6.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "7B81C488-69D0-4A5C-AEED-31869C1BF5CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server:6.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "65CD2558-C60C-4296-8E96-D4D804C598F0", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server:7.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "B8DF49C6-F2F6-4229-982E-0C0559265203", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server_as_key_manager:5.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "104DBA04-538E-4CC5-9B6C-CFEDB40375AA", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server_as_key_manager:5.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "E4F0F121-700C-4D30-BAFC-960DCC56F08B", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server_as_key_manager:5.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "2E5761F7-C287-4EC4-A899-C54FB4E80A35", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server_as_key_manager:5.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "3B184BFC-8E1A-4971-B6D2-C594742AB8CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server_as_key_manager:5.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "EA51AC1B-0BF6-44F6-B034-CAD4F623DD76", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:identity_server_as_key_manager:5.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "6BB34405-A2F1-461A-B51B-E103BB3680A1", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:open_banking_am:1.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "25CB9F8F-1447-4A54-B82A-FD3278A31FB5", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:open_banking_am:1.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "8CFB56F4-91D1-4FBF-842A-04BB117CAF85", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:open_banking_am:1.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "035BF3B3-1AB9-43BC-BB37-68843818EDEA", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:open_banking_am:2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "94347800-04D2-48C4-ACF0-078A5ACBB063", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:open_banking_iam:2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "D7C241A3-8EA0-41E4-ABF3-21B9D8E7A5BE", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:open_banking_km:1.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "6C46039C-BEE5-4338-8004-B5D9A7DEACBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:open_banking_km:1.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "E53783F4-60C7-4A92-8951-F8FD51170670", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:open_banking_km:1.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "535EFD44-F81C-43B2-B595-81429468637F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service. A malicious actor can exploit this vulnerability to reset the password of any user account, leading to a complete account takeover, including accounts with elevated privileges.\n\nThis vulnerability is exploitable only through the account recovery SOAP admin services exposed via the \"/services\" context path in affected products. The impact may be reduced if access to these endpoints has been restricted based on the \"Security Guidelines for Production Deployment\" by disabling exposure to untrusted networks."}, {"lang": "es", "value": "Existe una vulnerabilidad de autorizaci\u00f3n incorrecta en varios productos WSO2 debido a una falla en la l\u00f3gica de negocio del servicio de administraci\u00f3n SOAP relacionado con la recuperaci\u00f3n de cuentas. Un atacante puede explotar esta vulnerabilidad para restablecer la contrase\u00f1a de cualquier cuenta de usuario, lo que conlleva el robo total de la cuenta, incluso de cuentas con privilegios elevados. Esta vulnerabilidad solo se puede explotar a trav\u00e9s de los servicios de administraci\u00f3n SOAP de recuperaci\u00f3n de cuentas expuestos mediante la ruta de contexto \"/services\" en los productos afectados. El impacto puede reducirse si se restringe el acceso a estos endpoints seg\u00fan las \"Directrices de seguridad para la implementaci\u00f3n en producci\u00f3n\", deshabilitando la exposici\u00f3n a redes no confiables."}], "id": "CVE-2024-6914", "lastModified": "2025-10-06T13:56:53.380", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "type": "Secondary"}]}, "published": "2025-05-22T19:15:42.853", "references": [{"source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "tags": ["Vendor Advisory"], "url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3561/"}, {"source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "tags": ["Vendor Advisory"], "url": "https://security.docs.wso2.com/en/latest/security-guidelines/security-guidelines-for-production-deployment/"}], "sourceIdentifier": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "type": "Secondary"}]}

{}