CVE-2017-7474 | BDVDB-2026-85441 Detail

Red HatKeycloak Node.js adapter

Description#

It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-253

References#

https://bugzilla.redhat.com/show_bug.cgi?id=1445271
http://rhn.redhat.com/errata/RHSA-2017-1203.html

Exploit#

No public exploit known

History#

Version 12017-05-12Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.