Keycloak Vulnerabilidades

Curso de tempo

Ano passado

Versão

2.0	5
2.1	5
2.2	5
2.3	5
7.x	5

Medidas

Official Fix	59
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	50

Explorabilidade

High	0
Functional	1
Proof-of-Concept	2
Unproven	0
Not Defined	106

Tipo de acesso

Not Defined	0
Physical	1
Local	4
Adjacent	30
Network	74

Autenticação

Not Defined	0
High	7
Low	62
None	40

Actividade do utilizador

Not Defined	0
Required	33
None	76

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	17
≤5	21
≤6	32
≤7	25
≤8	10
≤9	4
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	18
≤5	20
≤6	33
≤7	27
≤8	6
≤9	4
≤10	0

VulDB

≤1	0
≤2	0
≤3	5
≤4	25
≤5	28
≤6	28
≤7	11
≤8	10
≤9	2
≤10	0

NVD

≤1	0
≤2	0
≤3	1
≤4	2
≤5	11
≤6	13
≤7	18
≤8	13
≤9	10
≤10	7

CNA

≤1	0
≤2	0
≤3	0
≤4	2
≤5	8
≤6	2
≤7	5
≤8	4
≤9	2
≤10	4

Fabricante

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explorar 0 dia

<1k	23
<2k	72
<5k	8
<10k	3
<25k	3
<50k	0
<100k	0
≥100k	0

Explorar hoje

<1k	103
<2k	5
<5k	0
<10k	1
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (62): 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 1, 1.0.1, 1.0.2, 1.0.3, 2, 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 3.0, 3.2.1.Final, 3.4, 3.4.1, 3.4.3.Final, 4.0, 4.0.0.Beta2, 4.2.1.Final, 4.3.0.Final, 4.8, 4.8.1, 4.8.2, 6, 6.0, 6.0.1, 6.0.2, 7.0, 7.0.1, 8, 8.0, 8.0.1, 8.0.2, 9, 9.0, 9.0.1, 10.0, 10.0.1, 11.0, 11.0.3, 12, 12.0, 12.0.1, 13.0, 15.0, 15.1, 20.0, 20.0.1, 20.0.2, 22.0.5

Publicado em	Base	Temp	Vulnerabilidade	0day	Hoje	Exp	Mas	CTI	CVE
17/04/2024	5.7	5.7	Keycloak redirect_uri Redirect	$0-$5k	$0-$5k	Not Defined	Not Defined	0.06	CVE-2024-2419
16/04/2024	3.5	3.5	Keycloak SAML Roteiro Cruzado de Sítios	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-6717
16/04/2024	3.5	3.5	Keycloak checkLoginIframe direitos alargados	$0-$5k	$0-$5k	Not Defined	Not Defined	0.09	CVE-2024-1249
16/04/2024	3.5	3.5	Keycloak URL Redirect	$0-$5k	$0-$5k	Not Defined	Not Defined	0.06	CVE-2024-1132
16/04/2024	3.5	3.5	Keycloak Client Registration direitos alargados	$0-$5k	$0-$5k	Not Defined	Not Defined	0.06	CVE-2023-6544
16/04/2024	5.5	5.5	Keycloak Token Type Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-0657
16/04/2024	6.3	6.3	Keycloak Client Step-Up Authentication Fraca autenticação	$0-$5k	$0-$5k	Not Defined	Not Defined	0.08	CVE-2023-3597
21/02/2024	3.6	3.4	Keycloak Account Lockout Negação de Serviço	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2024-1722
21/02/2024	5.5	5.5	Keycloak Fraca autenticação	$0-$5k	$0-$5k	Not Defined	Not Defined	0.09	CVE-2023-6787
18/12/2023	4.7	4.7	Red Hat Keycloak JARM Response Redirect	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2023-6927
15/12/2023	4.3	4.1	JBoss KeyCloak lowerCaseHostname Redirect	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-6291
15/12/2023	7.1	6.9	Red Hat keycloak/Single Sign-On/Middleware Container/ Admin User Interface Negação de Serviço	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-6563
12/12/2023	4.5	4.5	JBoss KeyCloak Incomplete Fix CVE-2020-10748 Roteiro Cruzado de Sítios	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2023-6134
04/12/2023	4.3	4.3	JBoss KeyCloak WebAuthn direitos alargados	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-6484
30/11/2023	5.5	5.3	Keycloak Login direitos alargados	$0-$5k	$0-$5k	Not Defined	Official Fix	0.06	CVE-2022-2232
13/09/2023	6.5	6.5	Keycloak User Registration Encriptação fraca	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-4918
28/06/2023	6.5	6.5	Keycloak URL Scheme Roteiro Cruzado de Sítios	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-4361
27/06/2023	5.5	5.5	Keycloak Device direitos alargados	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2023-2585
27/06/2023	4.6	4.6	Keycloak mTLS Authentication Fraca autenticação	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-2422
23/05/2023	5.7	5.7	keycloak Fraca autenticação	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-1664
28/04/2023	7.7	7.6	HYPR Keycloak Authenticator Extension Fraca autenticação	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-1477
03/03/2023	4.9	4.7	keycloak-connect Node.js Adapter Redirect	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2022-2237
03/03/2023	5.5	5.3	Keycloak Fraca autenticação	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-0264
01/03/2023	3.5	3.4	Keycloak OpenID Connect Login Service Roteiro Cruzado de Sítios	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2022-4137
01/03/2023	3.5	3.3	Keycloak Roteiro Cruzado de Sítios	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04	CVE-2022-1438

Keycloak Vulnerabilidades

Curso de tempo

Ano passado

Versão

Medidas

Explorabilidade

Tipo de acesso

Autenticação

Actividade do utilizador

C3BM Index

Ano passado

CVSSv3 Base

CVSSv3 Temp

VulDB

NVD

CNA

Fabricante

Research

Explorar 0 dia

Explorar hoje

Explorar o volume do mercado

Ano passado

🔴 CTI Actividades

🔒 Login Required

Do you know our Splunk app?