CVE-2024-10039 in Keycloak

Prediction

by VulDB Data Team • 12/05/2024

A flaw has been found in Keycloak. The impacted element is an unknown function of the component mTLS Handler. This manipulation causes improper authentication. The attack can only be done within the local network.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 10/16/2024
• Moderation: accepted
• Entry: VDB-285722
• CPE: ready
• CWE: CWE-287 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-10039
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-10039
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-10039/