Security Advisory

CVE-2017-2585

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-03-12 15:00:00

Last updated 2024-09-16 22:56:17

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

Red Hat Keycloak before version 2.5.1 has an implementation of HMAC verification for JWS tokens that uses a method that runs in non-constant time, potentially leaving the application vulnerable to timing attacks.

← Browse all CVEs View on cve.org ↗