PT-2025-39161 · Wso2 · Wso2 Products

Published 2025-09-23 · Updated 2025-10-06 · CVE-2024-4598

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WSO2 products (affected versions not specified)

Description An information disclosure issue exists due to an improper implementation of the enrich mediator. Authenticated users may be able to view unintended business data from other mediation contexts because the internal state is not properly isolated or cleared between executions. This does not impact user credentials or access tokens but may lead to leakage of sensitive business information handled during message flows.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1259

Related Identifiers

CVE-2024-4598

Affected Products

Wso2 Products

References · 7

• https://osv.dev/vulnerability/CVE-2024-4598 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-4598 · Security Note
• https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2024-3355 · Vendor Advisory
• https://t.me/cveNotify/137491 · Telegram Post
• https://t.me/cveNotify/136127 · Telegram Post
• https://t.me/CVEtracker/33158 · Telegram Post
• https://twitter.com/CVEnew/status/1970621819372888549 · Twitter Post