CVE-2019-3875- Keycloak X.509 Authenticator Man-In-The-Middle Weak Authentication
- First Post
- Replies
- Stats
-
Go to
- ----- 2025 -----
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
Hi Guys,
Is this CVE already fixed in keycloak version 6.0.1? The CVE
description says vulnerable upto 6.0.2 and the redhat link https://bugz
illa.redhat.com/show_bug.cgi?id=1690628 says fixed in version 6.0.2.
But we couldn't find keycloak version 6.0.2?
Thanks,
Shiva
Yes it was fixed and will be available on the next release.
On Tue, Aug 13, 2019 at 11:42 AM Shiva Prasad Thagadur Prakash
<shiva.prasad.thagadur.prakash(a)ericsson.com> wrote:
Hi Guys,
Is this CVE already fixed in keycloak version 6.0.1? The CVE
description says vulnerable upto 6.0.2 and the redhat link https://bugz
illa.redhat.com/show_bug.cgi?id=1690628 says fixed in version 6.0.2.
But we couldn't find keycloak version 6.0.2?
Thanks,
Shiva
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
- abstractj
1981
days inactive
1981
days old
1 comments
2 participants
tags (0)
participants (2)
-
Bruno Oliveira -
Shiva Prasad Thagadur Prakash