CVE-2017-7474

2017-05-1219:00:00

CWE-253

redhat

www.cve.org

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

56.9%

JSON

It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.

CNA Affected

[
  {
    "product": "Keycloak Node.js adapter",
    "vendor": "Red Hat, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "2.5 - 3.0"
      }
    ]
  }
]