A vulnerability identified as problematic has been detected in WSO2 Identity Server and Conditional Authentication User and Roles Related Functions. This affects an unknown part of the component Organization Context Handler. Performing a manipulation results in missing initialization of a variable. Access to the local network is required for this attack.
| Vendor | Product | Versions |
|---|---|---|
| wso2 | wso2 identity server | 7.1.0, 1.2.76 |
Updated description with new technical details, added CWE-665, and noted that no exploit is available.
Initial creation
