Lucene search
PRIOn knowledge basePRION:CVE-2023-1584HistoryOct 04, 2023 - 11:15 a.m.
Authorization
2023-10-0411:15:00
PRIOn knowledge base
www.prio-n.com
7
quarkus
oidc
authorization code flow
insecure http protocol
access tokens
id token
user data
nvd
A flaw was found in Quarkus. Quarkus OIDC can leak both ID and access tokens in the authorization code flow when an insecure HTTP protocol is used, which can allow attackers to access sensitive user data directly from the ID token or by using the access token to access user data from OIDC provider services. Please note that passwords are not stored in access tokens.
Related
cve
cve
CVE-2023-1584
2023-10-04 11:15:09
osv
osv
CVE-2023-1584
2023-10-04 11:15:09
Quarkus OIDC can leak both ID and access tokens
2023-10-04 12:30:14
github
github
Quarkus OIDC can leak both ID and access tokens
2023-10-04 12:30:14
veracode
veracode
Insecure Session Cookie Handling
2023-10-06 07:41:57
nvd
nvd
CVE-2023-1584
2023-10-04 11:15:09
cvelist
cvelist
redhatcve
redhatcve
CVE-2023-1584
2023-03-24 13:07:33
redhat
redhat