Threats tagged 'cleanstart-2026-id16270'

A critical security vulnerability exists in the wso2am package prior to version 4.7.0-r4. Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens using a non-cryptographic 32-bit hash of the token, which can lead to security risks. This vulnerability has a CVSS score of 9.1, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality and integrity. A fix is available in version 4.7.0-r4.