Количество 5
Количество 5
CVE-2023-2422
A flaw was found in Keycloak. A Keycloak server configured to support mTLS authentication for OAuth/OpenID clients does not properly verify the client certificate chain. A client that possesses a proper certificate can authorize itself as any other client, therefore, access data that belongs to other clients.
CVE-2023-2422
A flaw was found in Keycloak. A Keycloak server configured to support mTLS authentication for OAuth/OpenID clients does not properly verify the client certificate chain. A client that possesses a proper certificate can authorize itself as any other client, therefore, access data that belongs to other clients.
CVE-2023-2422
A flaw was found in Keycloak. A Keycloak server configured to support ...
GHSA-3qh5-qqj2-c78f
Keycloak vulnerable to Improper Client Certificate Validation for OAuth/OpenID clients
BDU:2023-05658
Уязвимость программного средства для управления идентификацией и доступом Keycloak, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-2422 A flaw was found in Keycloak. A Keycloak server configured to support mTLS authentication for OAuth/OpenID clients does not properly verify the client certificate chain. A client that possesses a proper certificate can authorize itself as any other client, therefore, access data that belongs to other clients. | CVSS3: 5.5 | 0% Низкий | около 3 лет назад |
 | CVE-2023-2422 A flaw was found in Keycloak. A Keycloak server configured to support mTLS authentication for OAuth/OpenID clients does not properly verify the client certificate chain. A client that possesses a proper certificate can authorize itself as any other client, therefore, access data that belongs to other clients. | CVSS3: 5.5 | 0% Низкий | почти 3 года назад |
| CVE-2023-2422 A flaw was found in Keycloak. A Keycloak server configured to support ... | CVSS3: 5.5 | 0% Низкий | почти 3 года назад |
| GHSA-3qh5-qqj2-c78f Keycloak vulnerable to Improper Client Certificate Validation for OAuth/OpenID clients | CVSS3: 7.1 | 0% Низкий | около 3 лет назад |
 | BDU:2023-05658 Уязвимость программного средства для управления идентификацией и доступом Keycloak, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации | CVSS3: 5.5 | 0% Низкий | около 3 лет назад |
Уязвимостей на страницу