CVE-2017-12160

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

It was found that Keycloak oauth would permit an authenticated resource to obtain an access/refresh token pair from the authentication server, permitting indefinite usage in the case of permission revocation. An attacker on an already compromised resource could use this flaw to grant himself continued permissions and possibly conduct further attacks.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-285 CWE-287

Affected software

Vendor	Product	Versions
Red Hat, Inc.	keycloak	3.4.0

References

https://access.redhat.com/errata/RHSA-2017:2904Issue Tracking, Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2905Issue Tracking, Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2906Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1484154Issue Tracking, Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2904Issue Tracking, Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2905Issue Tracking, Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2906Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1484154Issue Tracking, Third Party Advisory

Timeline

Published: Oct 26, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-121618.8It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset reque CVE-2017-121637.1An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.CVE-2017-121646.4A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled CVE-2017-121657.5It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause poss CVE-2017-121669.8OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly r CVE-2017-121675.5It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration that contain user t CVE-2017-121686.0The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause CVE-2017-121697.5It was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the 'System: Read Stage Users' permission. A remote CVE-2017-12176.1IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i CVE-2017-121709.8Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was CVE-2017-121716.5A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configurat CVE-2017-121726.7PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs