A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information.
References
Link | Resource |
---|---|
https://access.redhat.com/security/cve/CVE-2023-0091 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2023-01-13 06:15
Updated : 2024-02-28 19:51
NVD link : CVE-2023-0091
Mitre link : CVE-2023-0091
CVE.ORG link : CVE-2023-0091
JSON object : View
Products Affected
redhat
- single_sign-on
- keycloak
CWE
CWE-863
Incorrect Authorization