Vulnerability · Published Sep 12, 2023 · Assigned by redhat
CVE-2023-4918Plaintext storage of user password
High 8.8
In plain English
A high-severity security flaw in keycloak. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile. When a user registers itself through registration flow, the "password" and "password-confirm" field from the form will occur as regular user attributes. All users and clients with proper rights and roles are able to read users attributes, allowing a malicious user with minimal access to retrieve the users passwords in clear text, jeopardizing their environment.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | org.keycloak:keycloak-core | 22.0.3 | GHSA-5q66-v53q-pm35 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | keycloak | see references |
| Red Hat | Red Hat Single Sign-On 7 | see references |
Weakness: CWE-256 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://access.redhat.com/security/cve/CVE-2023-4918 vdb-entry, x_refsource_REDHAT
- RHBZ#2238588 issue-tracking, x_refsource_REDHAT
- https://github.com/keycloak/keycloak/security/advisories/GHSA-5q66-v53q-pm35