CVE-2024-7487CWE-287

Improper Authentication in WSO2 Identity Server 7.0.0 Allows Bypass of App-Native Authentication

Medium · published May 22, 2025

CVSS v3.1
5.8
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

An improper authentication vulnerability exists in WSO2 Identity Server 7.0.0 due to an implementation flaw that allows app-native authentication to be bypassed when an invalid object is passed.

Exploitation of this vulnerability could enable malicious actors to circumvent the client verification mechanism, compromising the integrity of the authentication process.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00329 · 24.7th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-05-22T19:03Z
EPSS history
Timeline
  • 22 MAY 19:03Z
    Improper Authentication in WSO2 Identity Server 7.0.0 Allows Bypass of App-Native Authentication
    cvelistv5