Lucene search
+L

2 matches found

OSV
OSV
added 2024/11/25 9:30 a.m.11 views

GHSA-JCGG-MG9G-P9WF Duplicate Advisory: Keycloak Build Process Exposes Sensitive Data

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v7gv-xpgf-6395. This link is maintained to preserve external references. Original Description A flaw was found in Keycloak. This issue occurs because sensitive runtime values, such as passwords, may be captured...

5.9CVSS5.7AI score0.00937EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2024/11/21 7:23 p.m.4 views

org.keycloak:keycloak-quarkus-server: Sensitive Data Exposure in Keycloak Build Process

A flaw was found in Keycloak. This issue occurs because sensitive runtime values, such as passwords, may be captured during the Keycloak build process and embedded as default values in bytecode, leading to unintended information disclosure. In Keycloak 26, sensitive data specified directly in...

5.9CVSS5.6AI score0.00937EPSS
SaveExploits0References4
Rows per page
Query Builder