Lucene search

CVE-2016-8609

🗓️ 01 Aug 2018 17:00:29Reported by redhatType

Keycloak before 2.3.0 allows session hijacking via phishing URL

Reporter	Title	Published	Views	Family All 8
NVD	CVE-2016-8609	1 Aug 201817:29	–	nvd
OSV	CVE-2016-8609	1 Aug 201817:29	–	osv
OSV	Improper Authentication in org.keycloak:keycloak-core	18 Oct 201816:48	–	osv
Cvelist	CVE-2016-8609	1 Aug 201817:00	–	cvelist
RedhatCVE	CVE-2016-8609	13 Dec 201619:47	–	redhatcve
RedHat Linux	(RHSA-2016:2945) Important: Red Hat Single Sign-On security update	13 Dec 201619:23	–	redhat
Prion	Authentication flaw	1 Aug 201817:29	–	prion
Github Security Blog	Improper Authentication in org.keycloak:keycloak-core	18 Oct 201816:48	–	github

Nvd

Vulners

Node

redhat keycloakRange<2.3.0

[
  {
    "product": "keycloak",
    "vendor": "Red Hat",
    "versions": [
      {
        "status": "affected",
        "version": "2.3.0"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1037460
rhn	www.rhn.redhat.com/errata/RHSA-2016-2945.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
securityfocus	www.securityfocus.com/bid/95070

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Aug 2018 17:29Current

7.8High risk

Vulners AI Score7.8

CVSS25.8

CVSS33.7 - 8.1

EPSS0.00221