CVE-2025-12627

Name of the Vulnerable Software and Affected Versions WSO2 Identity Server (affected versions not specified)

Description The user impersonation flow fails to properly manage refresh tokens associated with impersonated sessions. An attacker who obtains an access token for an impersonated user can use the refresh token grant to acquire new access tokens, allowing them to continue acting as the legitimate user. This compromise affects log integrity and traceability by masking the identity of the actual actor.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.