Vulnerabilities > CVE-2023-0091 - Incorrect Authorization vulnerability in Redhat Keycloak
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |