It was found that the keycloak before 2.3.0 did not implement authentication flow correctly. An attacker could use this flaw to construct a phishing URL, from which he could hijack the user's session. This could lead to information disclosure, or permit further possible attacks.
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
EUVD-2018-0559 | It was found that the keycloak before 2.3.0 did not implement authentication flow correctly. An attacker could use this flaw to construct a phishing URL, from which he could hijack the user's session. This could lead to information disclosure, or permit further possible attacks. |
![]() |
GHSA-95m6-mjh3-58gm | Improper Authentication in org.keycloak:keycloak-core |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.

Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T02:27:41.009Z
Reserved: 2016-10-12T00:00:00
Link: CVE-2016-8609

No data.

Status : Modified
Published: 2018-08-01T17:29:00.253
Modified: 2024-11-21T02:59:39.857
Link: CVE-2016-8609


No data.