A vulnerability was found in WSO2 Identity Server, Open Banking IAM, Identity Server as Key Manager, Email OTP Authenticator and Carbon Authenticator Library for EmailOTP. It has been rated as problematic. Affected by this vulnerability is an unknown functionality. This manipulation causes observable response discrepancy.

This vulnerability appears as CVE-2024-0391. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.