CVE-2024-6541: Information Disclosure and Integrity Violation via Improper Message Context Handling in Multiple WSO2 Products
The Class Mediator fails to correctly validate or sanitize messageContext properties when they are used to populate dynamic values. This allows authenticated users to potentially access or modify data across different system invocations that should be isolated.
This weakness can lead to the disclosure of sensitive information belonging to other users or the unintended modification of system data by authenticated users. The exact impact depends on how messageContext properties are utilized within the affected WSO2 products.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6541?
The severity of CVE-2024-6541 is medium with a score of 6.8.
How do I fix CVE-2024-6541?
To fix CVE-2024-6541, ensure that messageContext properties are properly validated and sanitized in your WSO2 applications.
What is CVE-2024-6541 about?
CVE-2024-6541 involves information disclosure and integrity violations due to improper message context handling in multiple WSO2 products.
Who is affected by CVE-2024-6541?
Authenticated users of WSO2 products may be affected by CVE-2024-6541, as it allows unauthorized access or modification of isolated data.
What can happen if CVE-2024-6541 is exploited?
Exploitation of CVE-2024-6541 can lead to unauthorized disclosure and modification of sensitive data across different system invocations.