CVE-2023-0264 in Keycloakinfo

Summary

by MITRE • 08/04/2023

A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issue could impact confidentiality, integrity, and availability.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservation

01/12/2023

Disclosure

08/04/2023

Moderation

accepted

CPE

ready

EPSS

0.01274

KEV

no

Activities

very low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2023-0264
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2023-0264
CVE Detailshttps://www.cvedetails.com/cve/CVE-2023-0264/

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!