Unverified50% confidenceFactExact time
The vulnerability only exists when BIG-IP APM is configured as an OAuth authorization server and the virtual server is simultaneously configured with both an APM access policy and an OAuth profile.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedOAuth 2.1 is a security-hardened version of the OAuth 2.0 authorization framework that mandates the use of PKCE to prevent authorization code interception attacks.64% similarUnverifiedOIDC is a modern protocol based on OAuth 2.0, preferred by cloud-native IdPs such as Google Workspace and Azure AD.63% similarUnverifiedThe OAuth protocol was originally designed to solve the problem of third-party applications accessing resources on behalf of users, with the core mechanism being users authorizing an authorization server in exchange for an access token.63% similarVerifiedOAuth 2.0专门处理授权委托，OpenID Connect在OAuth 2.0之上叠加身份验证层，SAML多用于企业联邦身份场景61% similarUnverifiedThe On-behalf-of-user (OBO) authorization model is typically implemented technically on top of the OAuth 2.0 token exchange mechanism.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1004644API
curl https://kongchang.com/api/v1/knowledge/claims/1004644MCP
get_claim(id=1004644)