CVE-2021-4314

It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT token as any user. This is happening only in the situation when zOSMF doesn’t have the APAR PH12143 applied. This issue affects: 1.16 versions to 1.19. What happens is that the...

PT-2023-12418 · Ibm · Zosmf

Name of the Vulnerable Software and Affected Versions: zOSMF versions 1.16 through 1.19 Description: It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without a valid JWT token as any user. This issue occurs when zOSMF doesn’t have the APAR PH1214...