Wso2 Carbon Identity Management
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Wso2 Carbon Identity Management.
By the Year
In 2026 there have been 1 vulnerability in Wso2 Carbon Identity Management with an average score of 4.8 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 4.80 |
It may take a day or so for new Wso2 Carbon Identity Management vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Wso2 Carbon Identity Management Security Vulnerabilities
WSO2 Identity Server Account Lockout Failure Allows BruteForce
CVE-2024-5617
4.8 - Medium
- November 02, 2026
The account lock feature fails to correctly enforce account lockouts on the primary user store when users with identical usernames exist in both primary and secondary user stores. This occurs because the lock condition is only applied to the secondary user store account in such scenarios, allowing continued authentication attempts against the primary user store account. This functional flaw enables brute force attacks. By systematically attempting different passwords against the primary user store account, an attacker can potentially gain unauthorized access to sensitive information or accounts, as the intended account lockout mechanism does not prevent repeated login attempts.
Insufficient anti-automation
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Wso2 Carbon Identity Management or by Wso2? Click the Watch button to subscribe.
