CVE-2024-7096: Privilege Escalation in Multiple WSO2 Products via SOAP Admin Service Due to Business Logic Flaw
A privilege escalation vulnerability exists in multiple [Vendor Name] products due to a business logic flaw in SOAP admin services. A malicious actor can create a new user with elevated permissions only when all of the following conditions are met: SOAP admin services are accessible to the attacker. The deployment includes an internally used attribute that is not part of the default WSO2 product configuration. At least one custom role exists with non-default permissions. The attacker has knowledge of the custom role and the internal attribute used in the deployment.
Exploiting this vulnerability allows malicious actors to assign higher privileges to self-registered users, bypassing intended access control mechanisms.
Other sources
A privilege escalation vulnerability exists in multiple WSO2 products due to a business logic flaw in SOAP admin services. A malicious actor can create a new user with elevated permissions only when all of the following conditions are met: SOAP admin services are accessible to the attacker. The deployment includes an internally used attribute that is not part of the default WSO2 product configuration. At least one custom role exists with non-default permissions. The attacker has knowledge of the custom role and the internal attribute used in the deployment.
Exploiting this vulnerability allows malicious actors to assign higher privileges to self-registered users, bypassing intended access control mechanisms.
— GitHub
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7096?
CVE-2024-7096 is classified as a high-severity privilege escalation vulnerability.
How do I fix CVE-2024-7096?
To mitigate CVE-2024-7096, users should update their affected WSO2 products to the latest version that addresses this vulnerability.
What products are affected by CVE-2024-7096?
CVE-2024-7096 affects multiple WSO2 products that utilize SOAP admin services.
What conditions must be met to exploit CVE-2024-7096?
A malicious actor can exploit CVE-2024-7096 only if they manage to access the SOAP admin services and fulfill specific conditions related to user creation.
Can CVE-2024-7096 be exploited remotely?
Yes, CVE-2024-7096 can potentially be exploited remotely by an attacker who has access to the SOAP admin services.