Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-3qh5-qqj2-c78f
Advisory ID github_osv/GHSA-3qh5-qqj2-c78f
Aliases CVE-2023-2422
Summary Keycloak vulnerable to Improper Client Certificate Validation for OAuth/OpenID clients When a Keycloak server is configured to support mTLS authentication for OAuth/OpenID clients, it does not properly verify the client certificate chain. A client that possesses a proper certificate can authorize itself as any other client and therefore access data that belongs to other clients.
Status Published
Exploitability 0.5
Weighted Severity 6.4
Risk 3.2
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-295 Improper Certificate Validation
System Score Found at
cvssv3.1 7.1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/06/GHSA-3qh5-qqj2-c78f/GHSA-3qh5-qqj2-c78f.json
generic_textual HIGH
Reference id Reference type URL
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/commit/5c6c55945a384bfd82e51283096204dcb6f63d91
2191668 Bug https://bugzilla.redhat.com/show_bug.cgi?id=2191668
CVE-2023-2422 Advisory https://access.redhat.com/security/cve/CVE-2023-2422
CVE-2023-2422 https://nvd.nist.gov/vuln/detail/CVE-2023-2422
GHSA-3qh5-qqj2-c78f https://github.com/keycloak/keycloak/security/advisories/GHSA-3qh5-qqj2-c78f
RHSA-2023:3883 https://access.redhat.com/errata/RHSA-2023:3883
RHSA-2023:3884 https://access.redhat.com/errata/RHSA-2023:3884
RHSA-2023:3885 https://access.redhat.com/errata/RHSA-2023:3885
RHSA-2023:3888 https://access.redhat.com/errata/RHSA-2023:3888
RHSA-2023:3892 https://access.redhat.com/errata/RHSA-2023:3892
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N Found at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/06/GHSA-3qh5-qqj2-c78f/GHSA-3qh5-qqj2-c78f.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-03T18:15:34Z/

Decision: Track

Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2023/2xxx/CVE-2023-2422.json

Source Advisory: vulnrichment/CVE-2023-2422

View SSVC decision tree 
[{'Exploitation': 'none'},
 {'Automatable': 'no'},
 {'Technical Impact': 'partial'},
 {'Mission Prevalence': 'minimal'},
 {'Public Well-being Impact': 'material'},
 {'Mission & Well-being': 'medium'}]