GHSA-xvv8-8wh9-9fh2MediumCVSS 5.4

Keycloak Authentication Error

Published
May 13, 2022
Last Modified
October 6, 2023

🔗 CVE IDs covered (1)

CVE-2018-10894 →

📋 Description

It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.

🎯 Affected products2

  • maven/org.keycloak:keycloak-saml-adapter-core:< 4.4.0.Final
  • maven/org.keycloak:keycloak-services:< 4.4.0.Final

🔗 References (8)