CVE-2023-0091

A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-01-13 06:15

Updated : 2024-02-28 19:51


NVD link : CVE-2023-0091

Mitre link : CVE-2023-0091

CVE.ORG link : CVE-2023-0091


JSON object : View

Products Affected

redhat

  • single_sign-on
  • keycloak
CWE
CWE-863

Incorrect Authorization