org.keycloak:keycloak-adapter-core (2.1.0.cr1), org.keycloak:keycloak-admin-client (2.1.0.cr1) +48 more potentially affected by CVE-2020-14389 via org.keycloak:keycloak-core (2.1.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.1.0.cr1 - org.keycloak:keycloak-admin-client 2.1.0.cr1 -...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-adapter-core (4.2.0.final) +64 more potentially affected by CVE-2020-14389 via org.keycloak:keycloak-core (4.2.0.final)

org.keycloak:keycloak-core MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

org.fintrace:microservice-keycloak-support (>=0.0.4, <=0.0.9), org.keycloak:keycloak-adapter-core (4.0.0.beta3) +64 more potentially affected by CVE-2020-14389 via org.keycloak:keycloak-core (4.0.0.beta3)

org.keycloak:keycloak-core MAVEN version 4.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.fintrace:microservice-keycloak-support =0.0.4, =0.0.9 - org.keycloak:keycloak-adapter-core...

io.github.johnjcool:keycloak-cas-services (>=4.3.0.final, <=4.3.1.final), org.keycloak:keycloak-adapter-core (4.3.0.final) +64 more potentially affected by CVE-2020-14389 via org.keycloak:keycloak-core (4.3.0.final)

org.keycloak:keycloak-core MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.3.0.final, =4.3.1.final -...

de.cidaas:cidaas-interceptor-spring-security-xml (0.0.1), org.fintrace:microservice-keycloak-support (>=0.0.2, <=0.0.3) +61 more potentially affected by CVE-2020-14389 via org.keycloak:keycloak-core (4.0.0.beta2)

org.keycloak:keycloak-core MAVEN version 4.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.cidaas:cidaas-interceptor-spring-security-xml 0.0.1 - org.fintrace:microservice-keycloak-support...

org.keycloak:keycloak-adapter-core (4.7.0.final), org.keycloak:keycloak-admin-client (4.7.0.final) +63 more potentially affected by CVE-2020-14389 via org.keycloak:keycloak-core (4.7.0.final)

org.keycloak:keycloak-core MAVEN version 4.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 4.7.0.final - org.keycloak:keycloak-admin-client 4.7.0.final -...

org.keycloak:keycloak-adapter-core (3.3.0.cr1), org.keycloak:keycloak-admin-client (3.3.0.cr1) +56 more potentially affected by CVE-2020-14389 via org.keycloak:keycloak-core (3.3.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.3.0.cr1 - org.keycloak:keycloak-admin-client 3.3.0.cr1 -...

org.keycloak:keycloak-adapter-core (3.3.0.cr2), org.keycloak:keycloak-admin-client (3.3.0.cr2) +56 more potentially affected by CVE-2020-14389 via org.keycloak:keycloak-core (3.3.0.cr2)

org.keycloak:keycloak-core MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.3.0.cr2 - org.keycloak:keycloak-admin-client 3.3.0.cr2 -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.3), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.3) +51 more potentially affected by CVE-2020-14389 via org.keycloak:keycloak-core (1.0.5.final)

org.keycloak:keycloak-core MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.3 -...

Code injection

The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level. If a specific .exe is not restarted often, it is possible to access the needed handshake packets between admin/client connections. Using the SYSDBA permission, an attacker can change user...

CVE-2021-38459 AUVESY Versiondog

The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level. If a specific .exe is not restarted often, it is possible to access the needed handshake packets between admin/client connections. Using the SYSDBA permission, an attacker can change user...

org.keycloak:keycloak-adapter-core (2.2.0.final), org.keycloak:keycloak-admin-client (2.2.0.final) +52 more potentially affected by CVE-2019-10170 via org.keycloak:keycloak-core (2.2.0.final)

org.keycloak:keycloak-core MAVEN version 2.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.2.0.final - org.keycloak:keycloak-admin-client 2.2.0.final -...

org.keycloak:keycloak-adapter-core (1.9.0.cr1), org.keycloak:keycloak-admin-client (1.9.0.cr1) +42 more potentially affected by CVE-2019-10170 via org.keycloak:keycloak-core (1.9.0.cr1)

org.keycloak:keycloak-core MAVEN version 1.9.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 1.9.0.cr1 - org.keycloak:keycloak-admin-client 1.9.0.cr1 -...

org.jboss.aerogear.unifiedpush:unifiedpush-service (1.2.3.final), org.keycloak:keycloak-adapter-core (3.4.2.final) +57 more potentially affected by CVE-2019-10170 via org.keycloak:keycloak-core (3.4.2.final)

org.keycloak:keycloak-core MAVEN version 3.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-service 1.2.3.final - org.keycloak:keycloak-adapter-core...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.3), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.3) +51 more potentially affected by CVE-2019-10170 via org.keycloak:keycloak-core (1.0.5.final)

org.keycloak:keycloak-core MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.3 -...

org.keycloak:keycloak-adapter-core (3.3.0.final), org.keycloak:keycloak-admin-client (3.3.0.final) +57 more potentially affected by CVE-2019-10170 via org.keycloak:keycloak-core (3.3.0.final)

org.keycloak:keycloak-core MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.3.0.final - org.keycloak:keycloak-admin-client 3.3.0.final -...

org.keycloak:keycloak-adapter-core (3.1.0.cr1), org.keycloak:keycloak-admin-client (3.1.0.cr1) +56 more potentially affected by CVE-2019-10170 via org.keycloak:keycloak-core (3.1.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.1.0.cr1 - org.keycloak:keycloak-admin-client 3.1.0.cr1 -...

org.keycloak:keycloak-adapter-core (1.9.5.final), org.keycloak:keycloak-admin-client (1.9.5.final) +43 more potentially affected by CVE-2019-10170 via org.keycloak:keycloak-core (1.9.5.final)

org.keycloak:keycloak-core MAVEN version 1.9.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 1.9.5.final - org.keycloak:keycloak-admin-client 1.9.5.final -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.9.0), org.jboss.windup.web:test-authentication-client (>=4.0.0.beta1, <=4.0.1.final) +50 more potentially affected by CVE-2019-10170 via org.keycloak:keycloak-core (2.1.0.final)

org.keycloak:keycloak-core MAVEN version 2.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.9.0 -...

org.keycloak:keycloak-adapter-core (2.4.0.final), org.keycloak:keycloak-admin-client (2.4.0.final) +52 more potentially affected by CVE-2019-10170 via org.keycloak:keycloak-core (2.4.0.final)

org.keycloak:keycloak-core MAVEN version 2.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.4.0.final - org.keycloak:keycloak-admin-client 2.4.0.final -...