CVE-2024-4598
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich Mediator
An information disclosure vulnerability exists in multiple WSO2 products due to improper implementation of the enrich mediator. Authenticated users may be able to view unintended business data from other mediation contexts because the internal state is not properly isolated or cleared between executions. This vulnerability does not impact user credentials or access tokens but may lead to leakage of sensitive business information handled during message flows.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
WSO2 API Manager
- Vendor
- WSO2
- Product
- WSO2 API Manager
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | unknown | custom | 3.2.0 | Unavailable | None listed |
| 3.2.0 | affected | custom | 3.2.0.422 | Unavailable | None listed |
| 3.2.1 | affected | custom | 3.2.1.42 | Unavailable | None listed |
| 4.1.0 | affected | custom | 4.1.0.152 | Unavailable | None listed |
| 4.3.0 | affected | custom | 4.3.0.55 | Unavailable | None listed |
WSO2 Micro Integrator
- Vendor
- WSO2
- Product
- WSO2 Micro Integrator
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | unknown | custom | 1.2.0 | Unavailable | None listed |
| 1.2.0 | affected | custom | 1.2.0.157 | Unavailable | None listed |
| 4.1.0 | affected | custom | 4.1.0.95 | Unavailable | None listed |