Overview
- Description
- A flaw was found in Keycloak. This issue occurs due to improperly enforcing token types when validating signatures locally. This could allow an authenticated attacker to exchange a logout token for an access token and possibly gain access to data outside of enforced permissions.
- Source
- secalert@redhat.com
- NVD status
- Received
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 3.4
- Impact score
- 2.5
- Exploitability score
- 0.9
- Vector string
- CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
- Severity
- LOW
Weaknesses
- secalert@redhat.com
- CWE-273
Social media
Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.
- Hype score
1