User Impersonation Vulnerability in WSO2 Products

CVE-2023-6837

What is CVE-2023-6837?

Multiple WSO2 products are susceptible to a user impersonation vulnerability due to inadequate controls during the Just-In-Time (JIT) provisioning process. This issue arises when an Identity Provider (IDP) is configured for federated authentication and JIT provisioning with specific user prompt settings. If an attacker possesses a freshly created valid user account in the IDP and knows the username of a legitimate user, they could exploit this vulnerability by leveraging the JIT provisioning flow to impersonate the authentic user. This highlights the importance of robust authentication measures and vigilant account management practices in preventing unauthorized access.

References