CVE-2025-5605 Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure

[
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Identity Server",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.10.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.10.0.361",
        "status": "affected",
        "version": "5.10.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.11.0.414",
        "status": "affected",
        "version": "5.11.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.0.0.245",
        "status": "affected",
        "version": "6.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.1.0.244",
        "status": "affected",
        "version": "6.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0.0.119",
        "status": "affected",
        "version": "7.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.1.0.25",
        "status": "affected",
        "version": "7.1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Enterprise Integrator",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "6.6.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.6.0.217",
        "status": "affected",
        "version": "6.6.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Universal Gateway",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.10",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Traffic Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.10",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "3.1.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.1.0.334",
        "status": "affected",
        "version": "3.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.0.430",
        "status": "affected",
        "version": "3.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.1.48",
        "status": "affected",
        "version": "3.2.1",
        "versionType": "custom"
      },
      {
        "lessThan": "4.0.0.346",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1.0.210",
        "status": "affected",
        "version": "4.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.2.0.148",
        "status": "affected",
        "version": "4.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.0.61",
        "status": "affected",
        "version": "4.3.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.4.0.24",
        "status": "affected",
        "version": "4.4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.0.10",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Control Plane",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.11",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Identity Server as Key Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.10.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.10.0.354",
        "status": "affected",
        "version": "5.10.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Open Banking AM",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.0.0.382",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Open Banking IAM",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.0.0.403",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.ui",
    "product": "org.wso2.carbon:org.wso2.carbon.ui",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.3.40",
        "status": "affected",
        "version": "4.5.3",
        "versionType": "custom"
      },
      {
        "lessThan": "4.6.0.1224",
        "status": "affected",
        "version": "4.6.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.6.1.150",
        "status": "affected",
        "version": "4.6.1",
        "versionType": "custom"
      },
      {
        "lessThan": "4.6.2.664",
        "status": "affected",
        "version": "4.6.2",
        "versionType": "custom"
      },
      {
        "lessThan": "4.6.3.32",
        "status": "affected",
        "version": "4.6.3",
        "versionType": "custom"
      },
      {
        "lessThan": "4.6.4.8",
        "status": "affected",
        "version": "4.6.4",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.1.69",
        "status": "affected",
        "version": "4.7.1",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.1.33",
        "status": "affected",
        "version": "4.8.1",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.0.100",
        "status": "affected",
        "version": "4.9.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.26.20",
        "status": "affected",
        "version": "4.9.26",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.27.4",
        "status": "affected",
        "version": "4.9.27",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.28.4",
        "status": "affected",
        "version": "4.9.28",
        "versionType": "custom"
      },
      {
        "lessThan": "4.10.9.68",
        "status": "affected",
        "version": "4.10.9",
        "versionType": "custom"
      },
      {
        "lessThan": "4.10.42.10",
        "status": "affected",
        "version": "4.10.42",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.9.*",
        "status": "unaffected",
        "version": "4.9.29",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "4.10.90",
        "versionType": "custom"
      }
    ]
  }
]