Keycloak: authorization bypass (org.keycloak:keycloak-services)
At a glance
- Source
- NVD
- EPSS
- EPSS 1.07 % · percentile 65 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- redhat
- NVD status
- Deferred
Description
A flaw was found in the Keycloak package. This issue occurs due to a permissive regular expression hardcoded for filtering which allows hosts to register a dynamic client. A malicious user with enough information about the environment could jeopardize an environment with this specific Dynamic Client Registration and TrustedDomain configuration previously unauthorized.
Weaknesses (CWE)
- CWE-625 — Permissive Regular Expression
References
- https://access.redhat.com/errata/RHSA-2024:1860
- https://access.redhat.com/errata/RHSA-2024:1861
- https://access.redhat.com/errata/RHSA-2024:1862
- https://access.redhat.com/errata/RHSA-2024:1864
- https://access.redhat.com/errata/RHSA-2024:1866
- https://access.redhat.com/errata/RHSA-2024:1867
- https://access.redhat.com/errata/RHSA-2024:1868
- https://access.redhat.com/security/cve/CVE-2023-6544
- https://bugzilla.redhat.com/show_bug.cgi?id=2253116
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N | redhat |
| CVSS 3.1 | MEDIUM 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N | NVD · secalert@redhat.com (Secondary) |
Advisories
- GHSA-46c8-635v-68r2 — Keycloak Authorization Bypass vulnerability
European references
- ENISA EUVD · EUVD-2024-1087
- GCVE · GCVE-0-2023-6544
Affected products
| Product | Versions |
|---|---|
| org.keycloak:keycloak-services | affected 22.0.0 < 22.0.10 ; affected 23.0.0 < 24.0.3 |
| Red Hat · Red Hat build of Keycloak 22 | unaffected 22.0.10-1 < * |
| Red Hat · Red Hat build of Keycloak 22 | unaffected 22-13 < * |
| Red Hat · Red Hat build of Keycloak 22 | unaffected 22-16 < * |
| Red Hat · Red Hat build of Keycloak 22.0.10 | |
| Red Hat · Red Hat Single Sign-On 7.6 for RHEL 7 | unaffected 0:18.0.13-1.redhat_00001.1.el7sso < * |
| Red Hat · Red Hat Single Sign-On 7.6 for RHEL 8 | unaffected 0:18.0.13-1.redhat_00001.1.el8sso < * |
| Red Hat · Red Hat Single Sign-On 7.6 for RHEL 9 | unaffected 0:18.0.13-1.redhat_00001.1.el9sso < * |
| Red Hat · RHEL-8 based Middleware Containers | unaffected 7.6-46 < * |
| Red Hat · RHSSO 7.6.8 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |