← CVE Intelligence

CVE-2023-6484

Keycloak: log injection during webauthn authentication or registration PUBLISHED

Description (CNA)

A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 before 22.0.9; affected 23.0.0 before 23.0.5
Red Hat / Red Hat build of Keycloak 22unaffected 22.0.10-1 before *
Red Hat / Red Hat build of Keycloak 22unaffected 22-13 before *
Red Hat / Red Hat build of Keycloak 22unaffected 22-16 before *
Red Hat / Red Hat build of Keycloak 22.0.10unaffected
Red Hat / Red Hat Single Sign-On 7unaffected
Red Hat / Red Hat Single Sign-On 7.6 for RHEL 7unaffected 0:18.0.12-1.redhat_00001.1.el7sso before *
Red Hat / Red Hat Single Sign-On 7.6 for RHEL 7unaffected 0:18.0.13-1.redhat_00001.1.el7sso before *
Red Hat / Red Hat Single Sign-On 7.6 for RHEL 8unaffected 0:18.0.12-1.redhat_00001.1.el8sso before *
Red Hat / Red Hat Single Sign-On 7.6 for RHEL 8unaffected 0:18.0.13-1.redhat_00001.1.el8sso before *
Red Hat / Red Hat Single Sign-On 7.6 for RHEL 9unaffected 0:18.0.12-1.redhat_00001.1.el9sso before *
Red Hat / Red Hat Single Sign-On 7.6 for RHEL 9unaffected 0:18.0.13-1.redhat_00001.1.el9sso before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.6-41 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.6-46 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.6-16 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.6-18 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.6.8-2 before *
Red Hat / RHSSO 7.6.8unaffected

CWE

CWE-117

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.