Threats tagged 'cleanstart-2026-mu39051'

A critical security vulnerability in wso2am versions prior to 4.7.0-r5 allows bypass of the max_age authentication-freshness check in the OidcClientCodeRequestFilter due to a timing unit mismatch and incorrect comparison logic. This flaw could enable attackers to circumvent authentication freshness validation, potentially leading to unauthorized access. The issue is fixed in version 4.7.0-r5.