Keycloak vulnerable to user impersonation via stolen UUID code

中 5.0CVE-2023-0264 · GHSA-9g98-5mj6-f9mv · 04/08/2023 公開 · 17/06/2026 更新

要点

CVE-2023-0264 は org.keycloak:keycloak-services, keycloak (redhat), openshift container platform (redhat) に影響する深刻度「中」 (CVSS 5.0) の脆弱性です。
今後30日間に悪用される確率（EPSS）：1.3%（全脆弱性の 69.9% より高い）。
対処：21.0.1, 18.0.6, 7.6.2 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
org.keycloak:keycloak-services Maven	`< 21.0.1`	`21.0.1`
keycloak redhat	`< 18.0.6`	`18.0.6`
openshift container platform redhat	`= 4.10= 4.9`	修正版なし
openshift container platform for ibm linuxone redhat	`= 4.10= 4.9`	修正版なし
openshift container platform ibm z systems redhat	`= 4.10= 4.9`	修正版なし
single sign-on redhat	`< 7.6.2`	`7.6.2`

概要

Keycloak's OpenID Connect user authentication was found to incorrectly authenticate requests. An authenticated attacker who could also obtain a certain piece of info from a user request, from a victim within the same realm, could use that data to impersonate the victim and generate new session tokens.

NVD の説明

A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issue could impact confidentiality, integrity, and availability.