Description

A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information.

Remediation

References

https://access.redhat.com/security/cve/CVE-2023-0091

Related Vulnerabilities

CVE-2020-16023 Vulnerability in maven package org.webjars.npm:electron

CVE-2023-35162 Vulnerability in maven package org.xwiki.platform:xwiki-platform-flamingo-skin-resources

CVE-2022-23619 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web

CVE-2018-1334 Vulnerability in maven package org.apache.spark:spark-core

CVE-2022-34182 Vulnerability in maven package org.jenkins-ci.plugins:nested-view

Severity

Low

Classification

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Tags

Vendor Advisory CWE-863