Privilege Escalation Vulnerability in WSO2 Products

CVE-2024-7096

What is CVE-2024-7096?

A privilege escalation vulnerability exists in multiple WSO2 products, stemming from a business logic flaw in the SOAP admin services. This flaw can be exploited by a malicious actor who is able to access the SOAP admin services and knows the specific custom role and internal attribute used in the deployment. If the deployment includes at least one custom role with non-default permissions, the attacker can create a new user with elevated privileges, hence bypassing intended access control mechanisms. Organizations using WSO2 products should ensure that appropriate security measures are in place to mitigate this risk.

References