Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-6484

Keycloak: log injection during webauthn authentication or registration

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

keycloak

Default version status: unaffected

  • 0 to < 22.0.9affected
  • 23.0.0 to < 23.0.5affected

Red Hat Red Hat build of Keycloak 22

Default version status: affected

  • 22.0.10-1 to < *unaffected

Red Hat Red Hat build of Keycloak 22

Default version status: affected

  • 22-13 to < *unaffected

Red Hat Red Hat build of Keycloak 22

Default version status: affected

  • 22-16 to < *unaffected

Red Hat Red Hat build of Keycloak 22.0.10

Default version status: unaffected

Red Hat Red Hat Single Sign-On 7

Default version status: unaffected

Red Hat Red Hat Single Sign-On 7.6 for RHEL 7

Default version status: affected

  • 0:18.0.12-1.redhat_00001.1.el7sso to < *unaffected

Red Hat Red Hat Single Sign-On 7.6 for RHEL 7

Default version status: affected

  • 0:18.0.13-1.redhat_00001.1.el7sso to < *unaffected

Red Hat Red Hat Single Sign-On 7.6 for RHEL 8

Default version status: affected

  • 0:18.0.12-1.redhat_00001.1.el8sso to < *unaffected

Red Hat Red Hat Single Sign-On 7.6 for RHEL 8

Default version status: affected

  • 0:18.0.13-1.redhat_00001.1.el8sso to < *unaffected

Red Hat Red Hat Single Sign-On 7.6 for RHEL 9

Default version status: affected

  • 0:18.0.12-1.redhat_00001.1.el9sso to < *unaffected

Red Hat Red Hat Single Sign-On 7.6 for RHEL 9

Default version status: affected

  • 0:18.0.13-1.redhat_00001.1.el9sso to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.6-41 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.6-46 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.6-16 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.6-18 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.6.8-2 to < *unaffected

Red Hat RHSSO 7.6.8

Default version status: unaffected

References