CVE-2024-5563

4.8 Moyenne

Publiée le 21/10/2026 à 16:17 · Modifiée le 21/10/2026 à 16:17 · Analyse NVD reportée · Source : ed10eef1-636d-4fbe-9993-6890dfa878f8

Description

Due to an incomplete implementation, reCaptcha is not applied to certain authentication flows even when the reCaptcha option is enabled. This oversight permits attackers to bypass the intended protection mechanism. Brute force attacks, if successful, can lead to unauthorized access to user accounts and sensitive information by systematically attempting various credential combinations.

Traduire en français

Produits concernés

WSO2 Identity Server

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.8 Moyenne	ed10eef1-636d-4fbe-9993-6890dfa878f8	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-306

Références

https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2024-3436/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories