Lucene search
Redhat.comRH:CVE-2023-0105HistoryJan 06, 2023 - 10:34 p.m.
CVE-2023-0105
2023-01-0622:34:54
redhat.com
access.redhat.com
20
keycloak
flaw
email trust
impersonation
lockout
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
0.001 Low
EPSS
Percentile
33.2%
A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.
Related
osv
osv
veracode
veracode
Insecure Permissions
2023-01-20 01:24:18
cve
cve
CVE-2023-0105
2023-01-13 06:15:11
github
github
nvd
nvd
CVE-2023-0105
2023-01-13 06:15:11
prion
prion
Design/Logic Flaw
2023-01-13 06:15:00
cvelist
cvelist
CVE-2023-0105
2023-01-11 20:46:51
redhat
redhat
nessus
nessus
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
0.001 Low
EPSS
Percentile
33.2%
Related for RH:CVE-2023-0105