PT-2019-4665

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 3.3.4 and 3.2.11 Description The issue is related to the OpenId Connect service in Apache CXF, where the access token service does not properly validate the authenticated principal against the supplied clientId...