cnvd - cnvd-2017-32892

cnvd-2017-32892

Vulnerability from cnvd

Title: Red Hat Keycloak跨站请求伪造漏洞（CNVD-2017-32892）

Description:

Keycloak是面向现代应用和服务的开源身份和访问管理解决方案。

Keycloak存在信息泄露漏洞。该漏洞产生的原因是Keycloak中用于CSRF预防的cookie并非对每个会话都是唯一的。攻击者可利用该漏洞获得对认证用户会话的访问权，这可能导致信息泄露或进一步的攻击。

Severity: 中

Patch Name: Red Hat Keycloak跨站请求伪造漏洞（CNVD-2017-32892）的补丁

Patch Description:

Keycloak是面向现代应用和服务的开源身份和访问管理解决方案。

Keycloak存在信息泄露漏洞。该漏洞产生的原因是Keycloak中用于CSRF预防的cookie并非对每个会话都是唯一的。攻击者可利用该漏洞获得对认证用户会话的访问权，这可能导致信息泄露或进一步的攻击。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布漏洞修复程序，请及时关注更新： https://bugzilla.redhat.com/show_bug.cgi?id=1484111

Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-12159

Impacted products

Name
Red Hat keycloak

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "101601"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-12159"
    }
  },
  "description": "Keycloak\u662f\u9762\u5411\u73b0\u4ee3\u5e94\u7528\u548c\u670d\u52a1\u7684\u5f00\u6e90\u8eab\u4efd\u548c\u8bbf\u95ee\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nKeycloak\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u4ea7\u751f\u7684\u539f\u56e0\u662fKeycloak\u4e2d\u7528\u4e8eCSRF\u9884\u9632\u7684cookie\u5e76\u975e\u5bf9\u6bcf\u4e2a\u4f1a\u8bdd\u90fd\u662f\u552f\u4e00\u7684\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u5f97\u5bf9\u8ba4\u8bc1\u7528\u6237\u4f1a\u8bdd\u7684\u8bbf\u95ee\u6743\uff0c\u8fd9\u53ef\u80fd\u5bfc\u81f4\u4fe1\u606f\u6cc4\u9732\u6216\u8fdb\u4e00\u6b65\u7684\u653b\u51fb\u3002",
  "discovererName": "Prapti Mittal",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1484111",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-32892",
  "openTime": "2017-11-07",
  "patchDescription": "Keycloak\u662f\u9762\u5411\u73b0\u4ee3\u5e94\u7528\u548c\u670d\u52a1\u7684\u5f00\u6e90\u8eab\u4efd\u548c\u8bbf\u95ee\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nKeycloak\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u4ea7\u751f\u7684\u539f\u56e0\u662fKeycloak\u4e2d\u7528\u4e8eCSRF\u9884\u9632\u7684cookie\u5e76\u975e\u5bf9\u6bcf\u4e2a\u4f1a\u8bdd\u90fd\u662f\u552f\u4e00\u7684\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u5f97\u5bf9\u8ba4\u8bc1\u7528\u6237\u4f1a\u8bdd\u7684\u8bbf\u95ee\u6743\uff0c\u8fd9\u53ef\u80fd\u5bfc\u81f4\u4fe1\u606f\u6cc4\u9732\u6216\u8fdb\u4e00\u6b65\u7684\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Red Hat Keycloak\u8de8\u7ad9\u8bf7\u6c42\u4f2a\u9020\u6f0f\u6d1e\uff08CNVD-2017-32892\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "Red Hat keycloak"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2017-12159",
  "serverity": "\u4e2d",
  "submitTime": "2017-10-27",
  "title": "Red Hat Keycloak\u8de8\u7ad9\u8bf7\u6c42\u4f2a\u9020\u6f0f\u6d1e\uff08CNVD-2017-32892\uff09"
}

CVE-2017-12159 (GCVE-0-2017-12159)

Vulnerability from cvelistv5

Published

2017-10-26 17:00

Modified

2024-09-16 21:02

Severity ?

CWE

CWE-613

Summary

It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. An attacker could use this flaw to gain access to an authenticated user session, leading to possible information disclosure or further attacks.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1484111	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2904	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2905	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:2906	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/101601	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	Red Hat, Inc.	keycloak	Version: 3.4.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:28:16.484Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1484111"
          },
          {
            "name": "RHSA-2017:2904",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2904"
          },
          {
            "name": "RHSA-2017:2905",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2905"
          },
          {
            "name": "RHSA-2017:2906",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2906"
          },
          {
            "name": "101601",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101601"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "keycloak",
          "vendor": "Red Hat, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "3.4.0"
            }
          ]
        }
      ],
      "datePublic": "2017-10-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. An attacker could use this flaw to gain access to an authenticated user session, leading to possible information disclosure or further attacks."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-613",
              "description": "CWE-613",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-28T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1484111"
        },
        {
          "name": "RHSA-2017:2904",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2904"
        },
        {
          "name": "RHSA-2017:2905",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2905"
        },
        {
          "name": "RHSA-2017:2906",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2906"
        },
        {
          "name": "101601",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101601"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "DATE_PUBLIC": "2017-10-17T00:00:00",
          "ID": "CVE-2017-12159",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "keycloak",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "3.4.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Red Hat, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. An attacker could use this flaw to gain access to an authenticated user session, leading to possible information disclosure or further attacks."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-613"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1484111",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1484111"
            },
            {
              "name": "RHSA-2017:2904",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2904"
            },
            {
              "name": "RHSA-2017:2905",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2905"
            },
            {
              "name": "RHSA-2017:2906",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2906"
            },
            {
              "name": "101601",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101601"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-12159",
    "datePublished": "2017-10-26T17:00:00Z",
    "dateReserved": "2017-08-01T00:00:00",
    "dateUpdated": "2024-09-16T21:02:35.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted