Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28894
HistoryJan 05, 2021 - 3:43 a.m.

Improper Certificate Validation

2021-01-0503:43:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

keycloak-services does not properly validate certificates. Lack of validation on the certificate timestamp validity allows an expired certificate to be accepted by Keycloak’s direct-grant authenticator.