Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4209
HistoryMay 09, 2017 - 1:32 a.m.

Privilege Escalation Through Authentication Bypass

2017-05-0901:32:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.002 Low

EPSS

Percentile

57.0%

keycloak-auth-utils is vulnerable to privilege escalation attacks. The vulnerability is possible because it does not properly perform the token validation in validateGrant(). Therefore, attackers can bypass the authentication with invalid tokens and perform unauthorized access to the restricted information and possibly launch other attacks.

CPENameOperatorVersion
keycloak-auth-utilsle3.0.0

0.002 Low

EPSS

Percentile

57.0%