CVE-2023-0264
published 2023-08-04CVE-2023-0264: A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain…
PriorityP431medium5CVSS 3.1
AVNACHPRLUINSUCLILAL
EPSS
1.27%
69.7th percentile
A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issue could impact confidentiality, integrity, and availability.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat.com | keycloak | >= 18.0.6 < 18.0.6 | 18.0.6 |
| redhat | keycloak | < 18.0.6 | 18.0.6 |
| redhat | openshift_container_platform | — | — |
| redhat | openshift_container_platform | — | — |
| redhat | openshift_container_platform_for_ibm_linuxone | — | — |
| redhat | openshift_container_platform_for_ibm_linuxone | — | — |
| redhat | openshift_container_platform_ibm_z_systems | — | — |
| redhat | openshift_container_platform_ibm_z_systems | — | — |
| redhat | single_sign-on | < 7.6.2 | 7.6.2 |
CVSS provenance
nvdv3.15.0MEDIUMCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
keycloak: user impersonation via stolen uuid code
vendor_redhat·2023-02-28·CVSS 5.0
CVE-2023-0264 [MEDIUM] CWE-303 keycloak: user impersonation via stolen uuid code
keycloak: user impersonation via stolen uuid code
A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issue could impact confidentiality, integrity, and availability.
A flaw was found in Keycloak's OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issue could impact confidentiality, Integrity, and availability.
Package: keycloak-services (Red
GHSA
Keycloak vulnerable to user impersonation via stolen UUID code
ghsa·2023-03-02
CVE-2023-0264 [HIGH] CWE-287 Keycloak vulnerable to user impersonation via stolen UUID code
Keycloak vulnerable to user impersonation via stolen UUID code
Keycloak's OpenID Connect user authentication was found to incorrectly authenticate requests. An authenticated attacker who could also obtain a certain piece of info from a user request, from a victim within the same realm, could use that data to impersonate the victim and generate new session tokens.
OSV
Keycloak vulnerable to user impersonation via stolen UUID code
osv·2023-03-02
CVE-2023-0264 [HIGH] Keycloak vulnerable to user impersonation via stolen UUID code
Keycloak vulnerable to user impersonation via stolen UUID code
Keycloak's OpenID Connect user authentication was found to incorrectly authenticate requests. An authenticated attacker who could also obtain a certain piece of info from a user request, from a victim within the same realm, could use that data to impersonate the victim and generate new session tokens.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-0264 keycloak: user impersonation via stolen uuid code
bugzilla·2023-01-12·CVSS 5.0
CVE-2023-0264 [MEDIUM] CVE-2023-0264 keycloak: user impersonation via stolen uuid code
CVE-2023-0264 keycloak: user impersonation via stolen uuid code
Keycloak's OpenID Connect user authentication was found to incorrectly authenticate requests. An authenticated attacker who could also obtain a certain piece of info from a user request, from a victim within the same realm, could use that data to impersonate the victim and generate new session tokens.
Discussion:
This issue has been addressed in the following products:
Red Hat Single Sign-On 7.6 for RHEL 7
Via RHSA-2023:1043 https://access.redhat.com/errata/RHSA-2023:1043
---
This issue has been addressed in the following products:
Red Hat Single Sign-On 7.6 for RHEL 8
Via RHSA-2023:1044 https://access.redhat.com/errata/RHSA-2023:1044
---
This issue has been addressed in the following products:
Red Hat Single Sign-
Bugzilla
CVE-2022-37601 loader-utils: prototype pollution in function parseQuery in parseQuery.js
bugzilla·2022-10-14·CVSS 9.8
CVE-2022-37601 [CRITICAL] CVE-2022-37601 loader-utils: prototype pollution in function parseQuery in parseQuery.js
CVE-2022-37601 loader-utils: prototype pollution in function parseQuery in parseQuery.js
Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils 2.0.0 via the name variable in parseQuery.js.
loader-utils prior to version 3 is deprecated and no longer supported
External Reference:
https://github.com/webpack/loader-utils/issues/212
Discussion:
Created golang-github-prometheus tracking bugs for this issue:
Affects: epel-7 [bug 2149392]
Created seamonkey tracking bugs for this issue:
Affects: epel-8 [bug 2149393]
---
This issue has been addressed in the following products:
RHOL-5.6-RHEL-8
Via RHSA-2023:0264 https://access.redhat.com/errata/RHSA-2023:0264
---
This bug is now closed. Further updates for individual products will be reflecte
2023-08-04
Published