Vigilance Vulnerability Alerts - Keycloak: information disclosure via OAuth 2.0 Pushed Authorization Requests, analyzed on 03/06/2024
August 2024 by Vigilance.fr
An attacker can bypass access restrictions to data of Keycloak, via OAuth 2.0 Pushed Authorization Requests, in order to read sensitive information.
Plus d'information sur : https://vigilance.fr/vulnerability/Keycloak-information-disclosure-via-OAuth-2-0-Pushed-Authorization-Requests-44436
See previous articles
See next articles
Your podcast HereNew, you can have your Podcast here. Contact us for more information ask:
Marc Brami
Phone: +33 1 40 92 05 55
Mail: ipsimp@free.fr
All new podcasts
News
