Lucene search
Redhat.comRH:CVE-2023-6484HistoryDec 04, 2023 - 10:56 a.m.
CVE-2023-6484
2023-12-0410:56:49
redhat.com
access.redhat.com
59
keycloak
log injection
webauthn
authentication
minor impact
integrity
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AI Score
7.6
Confidence
Low
EPSS
0.001
Percentile
17.1%
A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.
Related
vulnrichment
vulnrichment
nvd
nvd
CVE-2023-6484
2024-04-25 16:15:09
cve
cve
CVE-2023-6484
2024-04-25 16:15:09
veracode
veracode
Improper Logs Output Neutralization
2024-04-18 07:00:37
osv
osv
github
github
cvelist
cvelist
nessus
nessus
redhat
redhat
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AI Score
7.6
Confidence
Low
EPSS
0.001
Percentile
17.1%
Related for RH:CVE-2023-6484