CVE-2023-0264 | BDVDB-2026-208671 Detail

redhat.comKeycloak

Description#

A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issue could impact confidentiality, integrity, and availability.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://access.redhat.com/security/cve/CVE-2023-0264

Exploit#

No public exploit known

History#

Version 12023-08-04Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.