Lucene search
Veracode Vulnerability DatabaseVERACODE:46501HistoryApr 18, 2024 - 6:19 a.m.
Improper Authentication
2024-04-1806:19:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
vulnerability
token enforcement
authenticated attacker
access token
data breach
6.8 Medium
AI Score
Confidence
High
org.keycloak:keycloak-services is vulnerable to Improper Authentication. This vulnerability is due to improperly enforcement of token types, allowing an authenticated attacker to exchange a logout token for an access token, potentially accessing data beyond permitted permissions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| keycloak rest services | le | 22.0.5 | |
| keycloak rest services | le | 24.0.2 | |
| keycloak rest services | le | 22.0.5 | |
| keycloak rest services | le | 24.0.2 |
Related
redhatcve
redhatcve
CVE-2023-0657
2024-04-17 13:00:29
cgr
cgr
CVE-2023-0657 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2023-0657 vulnerabilities
2024-06-02 15:23:11
github
github
Keycloak vulnerable to impersonation via logout token exchange
2024-04-17 18:25:59
osv
osv
Keycloak vulnerable to impersonation via logout token exchange
2024-04-17 18:25:59
redhat
redhat