CVE-2025-1396 | WSO2 Identity Server Multi-Attribute Login information exposure

A vulnerability was found in WSO2 Identity Server, Open Banking IAM and Identity Server as Key Manager. It has been classified as problematic. This issue affects some unknown processing of the component Multi-Attribute Login. The manipulation leads to information exposure through discrepancy.

This vulnerability is uniquely identified as CVE-2025-1396. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.