Executive Summary

This vulnerability involves an insufficiently secured internal function that allows an attacker to generate a session for any arbitrary user. Specifically, the decodeParam function checks the JWT but does not verify the signing algorithm used. This flaw enables an attacker to exploit the "ex:action" parameter in the VerifyUserByThrustedService function to create unauthorized sessions.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can allow an attacker to impersonate any user by generating unauthorized sessions. This can lead to unauthorized access to user accounts, potentially exposing sensitive information, enabling privilege escalation, and compromising the integrity and confidentiality of the system.

Useful 0 Not Useful 0