VU#645818: Xerj Console API Authentication Bypass Leads to Unauthorized Credential Minting

An authentication bypass vulnerability in the Xerj Console API allows sessions to bypass passkey-backed requirements during token issuance. By exploiting this flaw, an attacker with an existing valid token can create independent, persistent successor credentials directly through the console API. …