Vulnerabilities > CVE-2017-7474 - Unspecified vulnerability in Keycloak Keycloak-Nodejs-Auth-Utils
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.
Vulnerable Configurations
Redhat
| advisories |
|