Lucene search
PRIOn knowledge basePRION:CVE-2023-49594HistoryDec 23, 2023 - 8:15 p.m.
Information disclosure
2023-12-2320:15:00
PRIOn knowledge base
www.prio-n.com
5
information disclosure
instipod
duouniversalkeycloakauthenticator
http request
sensitive information
keycloak
vulnerability
user logging
An information disclosure vulnerability exists in the challenge functionality of instipod DuoUniversalKeycloakAuthenticator 1.0.7 plugin. A specially crafted HTTP request can lead to a disclosure of sensitive information. A user logging into Keycloak using DuoUniversalKeycloakAuthenticator plugin triggers this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| duouniversalkeycloakauthenticator | lt | 1.0.8 |
Related
talos
talos
osv
osv
CVE-2023-49594
2023-12-23 20:15:38
cve
cve
CVE-2023-49594
2023-12-23 20:15:38
nvd
nvd
CVE-2023-49594
2023-12-23 20:15:38
cvelist
cvelist
CVE-2023-49594
2023-12-23 20:04:48
talosblog
talosblog