WSO2 WSO2 Carbon User Manager Kernel

• CVE-2024-5617 Medium 4.8 Account Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force Attacks 0.2%
• CVE-2024-2323 Medium 4.8 Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discovery 0.2%
• CVE-2024-4457 Critical 9.1 Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution 0.4%
• CVE-2024-6832 Medium 5.9 Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks 0.4%
• CVE-2024-3511 Medium 4.3 Incorrect Authorization in Multiple WSO2 Products Allows Unauthorized Access to Registry Versioned Files 0.2%