Risk | Medium |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2023-6484 |
CWE-ID | CWE-117 |
Exploitation vector | Network |
Public exploit | N/A |
Vulnerable software Subscribe |
Keycloak Server applications / Directory software, identity management |
Vendor | Keycloak |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
EUVDB-ID: #VU86549
Risk: Medium
CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-6484
CWE-ID:
CWE-117 - Improper Output Neutralization for Logs
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to manipulate data in log files.
The vulnerability exists due to improper input validation during WebAuthn authentication or registration. A remote attacker can manipulate data in log files when using the WebAuthn authentication mode.
Install updates from vendor's website.
Vulnerable software versionsKeycloak: 22.0.0 - 23.0.4
External linkshttp://bugzilla.redhat.com/show_bug.cgi?id=2248423
http://github.com/keycloak/keycloak/security/advisories/GHSA-j628-q885-8gr5
http://access.redhat.com/errata/RHSA-2024:1867
http://access.redhat.com/errata/RHSA-2024:1868
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.