Vulnerabilities > Linuxfoundation > Zowe API Mediation Layer > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-01-18 CVE-2021-4314 Improper Authentication vulnerability in Linuxfoundation Zowe API Mediation Layer
It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT token as any user.
network
low complexity
linuxfoundation CWE-287
5.3