Published: 13/11/2019 Updated: 14/11/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Impact: Low Public Date: 2014-09-20 CWE: CWE-352 Bugzilla: 1144817: CVE-2014-3655 JBoss KeyCloak: Soft Token deletion via CSRF It exists that JBoss KeyCloak's soft token removal endpoint was vulnerable to Cross-Site Request Forgery (CSRF) attacks. A remote attacker could provide a specially crafted web page that, when visited by a user authenticated by KeyCloak, could allow the malicious user to remove a soft token registerd to the user.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat keycloak
redhat jboss enterprise web server 1.0.0

Impact: Low Public Date: 2014-09-20 CWE: CWE-352 Bugzilla: 1144817: CVE-2014-3655 JBoss KeyCloak: Soft ...

CWE-352 https://snyk.io/vuln/SNYK-JAVA-ORGKEYCLOAK-30138 https://access.redhat.com/security/cve/cve-2014-3655 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3655 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2014-3655

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-3655

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect