CVE-2016-4311

Published: 2017-02-17T02:59Z

Last Modified: 2024-11-21T02:51Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt