WSO2 Identity Server Improper Authentication Vulnerability Allowing Bypass of Client Verification

A vulnerability allowing improper authentication has been identified in WSO2 Identity Server version 7.0.0. This issue arises from an implementation flaw that enables the bypassing of app-native authentication when an invalid object is received. Exploiting this vulnerability could allow malicious actors to evade the client verification process, thereby undermining the integrity of authentication.

Impact

Exploitation of this vulnerability could lead to unauthorized bypassing of authentication mechanisms, allowing attackers to manipulate the authentication process and potentially gain unauthorized access or privileges.