Description

A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information.

Remediation

References

https://access.redhat.com/security/cve/CVE-2023-0091

Related Vulnerabilities

CVE-2022-26594 Vulnerability in maven package com.liferay:com.liferay.dynamic.data.mapping.form.field.type

CVE-2017-8452 Vulnerability in npm package kibana

CVE-2023-3223 Vulnerability in maven package io.undertow:undertow-servlet

CVE-2022-26850 Vulnerability in maven package org.apache.nifi:nifi-single-user-utils

CVE-2014-0099 Vulnerability in maven package org.apache.tomcat:coyote

Severity

Low

Classification

CWE-863 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Tags

Vendor Advisory