CVE-2023-6837 Incorrect Authorization in Multiple WSO2 Products via Federated Authentication with JIT Provisioning Leading to User Impersonation

[
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "2.5.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.5.0.32",
        "status": "affected",
        "version": "2.5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.6.0.52",
        "status": "affected",
        "version": "2.6.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.0.0.50",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.1.0.72",
        "status": "affected",
        "version": "3.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.0.86",
        "status": "affected",
        "version": "3.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.0.0.35",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Identity Server",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.6.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.6.0.16",
        "status": "affected",
        "version": "5.6.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.7.0.35",
        "status": "affected",
        "version": "5.7.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.8.0.26",
        "status": "affected",
        "version": "5.8.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.9.0.38",
        "status": "affected",
        "version": "5.9.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.10.0.78",
        "status": "affected",
        "version": "5.10.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.11.0.69",
        "status": "affected",
        "version": "5.11.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Identity Server as Key Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.6.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.6.0.17",
        "status": "affected",
        "version": "5.6.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.7.0.39",
        "status": "affected",
        "version": "5.7.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.9.0.45",
        "status": "affected",
        "version": "5.9.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.10.0.80",
        "status": "affected",
        "version": "5.10.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.authentication.framework",
    "product": "WSO2 Carbon Identity Application Authentication Framework",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.11.256.3",
        "status": "affected",
        "version": "5.11.256",
        "versionType": "custom"
      },
      {
        "lessThan": "5.12.153.21",
        "status": "affected",
        "version": "5.12.153",
        "versionType": "custom"
      },
      {
        "lessThan": "5.12.387.7",
        "status": "affected",
        "version": "5.12.387",
        "versionType": "custom"
      },
      {
        "lessThan": "5.14.97.22",
        "status": "affected",
        "version": "5.14.97",
        "versionType": "custom"
      },
      {
        "lessThan": "5.17.5.106",
        "status": "affected",
        "version": "5.17.5",
        "versionType": "custom"
      },
      {
        "lessThan": "5.18.187.76",
        "status": "affected",
        "version": "5.18.187",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "5.20.254",
        "versionType": "custom"
      }
    ]
  }
]