CVE-2023-0657
CVSS 3.1 Score 3.4 of 10 (low)
Details
Published Nov 17, 2024
Updated: Nov 18, 2024
CWE ID 273
Summary
CVE-2023-0657 is a vulnerability affecting Keycloak. This issue arises due to a lack of adequate enforcement of token types during local signature validation. As a result, an authenticated attacker can exploit this flaw to exchange logout tokens for access tokens. Such unauthorized access could potentially grant the attacker access to data beyond their authorized permissions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.