CVE-2023-6927

CVSS V2 None CVSS V3 None
Description
A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "form_post.jwt" which could be used to bypass the security patch implemented to address CVE-2023-6134.
Overview
  • CVE ID
  • CVE-2023-6927
  • Assigner
  • redhat
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-12-18T22:59:07.495Z
  • Last Modified Date
  • 2024-06-12T10:10:01.948Z
Weakness Enumerations
CWE URL
CWE-601 http://cwe.mitre.org/data/definitions/601.html
References
Reference URL Reference Tags
https://access.redhat.com/errata/RHSA-2024:0094 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0095 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0096 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0097 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0098 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0100 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0101 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0798 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0799 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0800 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0801 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0804 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2023-6927 vdb-entry x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2255027 issue-tracking x_refsource_REDHAT
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-6927
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6927
History
Created Old Value New Value Data Type Notes
2024-06-25 06:44:51 Added to TrackCVE