8 matches found
CVE-2026-105301
A flaw exists in the X.509 client-certificate authenticator of Keycloak , an identity and access management solution. When the server is configured to perform certificate revocation checks via CRL Distribution Points or OCSP , an attacker can provide a specially crafted certificate pointing to a ...
CVE-2026-105301
...
EUVD-2019-0491
Malware in sbrugna...
CVE-2019-3875
A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained from the URL provided in the certificate itself CDP or through the separately configured path. The CRL are often availab...
CVE-2019-3875
A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained from the URL provided in the certificate itself CDP or through the separately configured path. The CRL are often availab...
PT-2019-16749
Name of the Vulnerable Software and Affected Versions Keycloak versions prior to 6.0.2 Description A vulnerability was found in the X.509 authenticator, which supports the verification of client certificates through the Certificate Revocation List CRL. The CRL can be obtained from the URL provide...
CVE-2019-3875: Insufficient Verification of Data Authenticity
A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained from the URL provided in the certificate itself CDP or through the separately configured path. The CRL are often availab...