CVE-2023-4918: Plaintext storage of user password
Vulnerability summary
CVE-2023-4918 is a high (CVSS 8.8) Plaintext Storage of a Password vulnerability in redhat keycloak. EPSS estimates a 0.57% chance of exploitation in the next 30 days, higher than 46.6% of scored vulnerabilities.
Timeline
- 12-09-2023PublishedVulnerability first disclosed.
- 25-09-2024Last modifiedVulnerability information updated.
Description
A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile. When a user registers itself through registration flow, the "password" and "password-confirm" field from the form will occur as regular user attributes. All users and clients with proper rights and roles are able to read users attributes, allowing a malicious user with minimal access to retrieve the users passwords in clear text, jeopardizing their environment.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · MavenEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.57%
Chance of exploitation in the next 30 days
Percentile
47%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.57% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-256Plaintext Storage of a PasswordThe product stores a password in plaintext within resources such as memory or files.
- CWE-319Cleartext Transmission of Sensitive InformationThe product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
Affected systems
Org.keycloak1 product
- keycloak-core≥ 22.0.2, < 22.0.3
Redhat1 product
- keycloakEOL22.0.2
2 vendors · 2 products
References
5 links
- github.com/keycloak/keycloakPACKAGE