CVE-2024-7478 Username Enumeration via External User Stores in Multiple WSO2 Products Allows User Account Discovery

[
  {
    "vendor": "WSO2",
    "product": "WSO2 API Manager",
    "versions": [
      {
        "status": "unknown",
        "version": "0",
        "lessThan": "3.1.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "3.1.0",
        "lessThan": "3.1.0.310",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "3.2.0",
        "lessThan": "3.2.0.401",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "3.2.1",
        "lessThan": "3.2.1.26",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.0.0",
        "lessThan": "4.0.0.318",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.1.0",
        "lessThan": "4.1.0.180",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.2.0",
        "lessThan": "4.2.0.119",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.3.0",
        "lessThan": "4.3.0.30",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WSO2",
    "product": "WSO2 Identity Server as Key Manager",
    "versions": [
      {
        "status": "unknown",
        "version": "0",
        "lessThan": "5.10.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "5.10.0",
        "lessThan": "5.10.0.320",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WSO2",
    "product": "WSO2 Identity Server",
    "versions": [
      {
        "status": "unknown",
        "version": "0",
        "lessThan": "5.10.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "5.10.0",
        "lessThan": "5.10.0.326",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.0.0",
        "lessThan": "6.0.0.214",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.1.0",
        "lessThan": "6.1.0.198",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "7.0.0",
        "lessThan": "7.0.0.67",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WSO2",
    "product": "WSO2 Open Banking IAM",
    "versions": [
      {
        "status": "unknown",
        "version": "0",
        "lessThan": "2.0.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.0.0",
        "lessThan": "2.0.0.371",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WSO2",
    "product": "WSO2 Open Banking AM",
    "versions": [
      {
        "status": "unknown",
        "version": "0",
        "lessThan": "2.0.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.0.0",
        "lessThan": "2.0.0.351",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WSO2",
    "product": "WSO2 Carborn Identity Handler",
    "packageName": "org.wso2.carbon.identity.handler.event.account.lock",
    "versions": [
      {
        "status": "affected",
        "version": "1.4.0",
        "lessThan": "1.4.0.15",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.4.0",
        "lessThan": "1.4.0.16",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.4.11",
        "lessThan": "1.4.11.14",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.4.37",
        "lessThan": "1.4.37.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.6.1",
        "lessThan": "1.6.1.5",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.7.1",
        "lessThan": "1.7.1.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.8.6",
        "lessThan": "1.8.6.5",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.8.14",
        "lessThan": "1.8.14.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.9.2",
        "lessThan": "1.9.2.4",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]