[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flUoqEzaV12wwQi1wWPV9rhW0zKAUBrvrK8Y7I52FVW0":3,"g5a-risk:CVE-2022-3916":222},{"success":4,"data":5,"meta":219},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":82,"references":83,"referencesCount":123,"weaknesses":124,"weaknessesCount":140,"isActivelyExploited":141,"cisaInfo":27,"otxData":27,"relatedBlogPosts":142,"seoMetadata":143,"configurations":168,"relatedVendorCves":217,"notableEvents":218},"CVE-2022-3916","What is CVE-2022-3916?","A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especially if cookies are not cleared), due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to resolve a user session attached to a previously authenticated user; when utilizing the refresh token, they will be issued a token for the original user.","A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especially if cookies are not cleared), due...","2023-09-20T15:15:11.583","2023-11-07T03:51:57.67",6.8,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":24,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","HIGH","LOW","NONE","UNCHANGED","MEDIUM",null,1.6,5.2,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"53f830b8-0a3f-465b-8143-3b8a9948e749","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":24,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00952,[34,34,34,34,34,34,34],"Medium",[38,43,47,50,54,57,60,64,67,70,72,75,77,80],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"redhat","keycloak","*","cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*",{"vendor":39,"product":44,"version":45,"criteria":46,"vulnerable":4},"single_sign-on","-","cpe:2.3:a:redhat:single_sign-on:-:*:*:*:text-only:*:*:*",{"vendor":39,"product":44,"version":48,"criteria":49,"vulnerable":4},"7.6","cpe:2.3:a:redhat:single_sign-on:7.6:*:*:*:*:*:*:*",{"vendor":39,"product":51,"version":52,"criteria":53,"vulnerable":4},"enterprise_linux","7.0","cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",{"vendor":39,"product":51,"version":55,"criteria":56,"vulnerable":4},"8.0","cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",{"vendor":39,"product":51,"version":58,"criteria":59,"vulnerable":4},"9.0","cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",{"vendor":39,"product":61,"version":62,"criteria":63,"vulnerable":4},"openshift_container_platform","4.9","cpe:2.3:a:redhat:openshift_container_platform:4.9:*:*:*:*:*:*:*",{"vendor":39,"product":61,"version":65,"criteria":66,"vulnerable":4},"4.10","cpe:2.3:a:redhat:openshift_container_platform:4.10:*:*:*:*:*:*:*",{"vendor":39,"product":68,"version":62,"criteria":69,"vulnerable":4},"openshift_container_platform_for_linuxone","cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.9:*:*:*:*:*:*:*",{"vendor":39,"product":68,"version":65,"criteria":71,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.10:*:*:*:*:*:*:*",{"vendor":39,"product":73,"version":62,"criteria":74,"vulnerable":4},"openshift_container_platform_for_power","cpe:2.3:a:redhat:openshift_container_platform_for_power:4.9:*:*:*:*:*:*:*",{"vendor":39,"product":73,"version":65,"criteria":76,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_for_power:4.10:*:*:*:*:*:*:*",{"vendor":39,"product":78,"version":62,"criteria":79,"vulnerable":4},"openshift_container_platform_ibm_z_systems","cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.9:*:*:*:*:*:*:*",{"vendor":39,"product":78,"version":65,"criteria":81,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.10:*:*:*:*:*:*:*",14,[84,89,92,95,98,101,104,107,110,113,116,119],{"url":85,"source":86,"tags":87},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2022:8961","Red Hat",[88],"Vendor Advisory",{"url":90,"source":86,"tags":91},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2022:8962",[88],{"url":93,"source":86,"tags":94},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2022:8963",[88],{"url":96,"source":86,"tags":97},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2022:8964",[88],{"url":99,"source":86,"tags":100},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2022:8965",[88],{"url":102,"source":86,"tags":103},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:1043",[88],{"url":105,"source":86,"tags":106},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:1044",[88],{"url":108,"source":86,"tags":109},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:1045",[88],{"url":111,"source":86,"tags":112},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:1047",[88],{"url":114,"source":86,"tags":115},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:1049",[88],{"url":117,"source":86,"tags":118},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2022-3916",[88],{"url":120,"source":86,"tags":121},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2141404",[122,88],"Issue Tracking",12,[125,133],{"id":126,"name":127,"description":128,"extendedDescription":129,"status":130,"abstraction":131,"structure":132},"CWE-384","Session Fixation","Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.","Such a scenario is commonly observed when:\nIn the generic exploit of session fixation vulnerabilities, an attacker creates a new session on a web application and records the associated session identifier. The attacker then causes the victim to associate, and possibly authenticate, against the server using that session identifier, giving the attacker access to the user's account through the active session.","Incomplete","Compound","Composite",{"id":134,"name":135,"description":136,"extendedDescription":137,"status":130,"abstraction":138,"structure":139},"CWE-613","Insufficient Session Expiration","According to WASC, \"Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.\"","","Base","Simple",2,false,[],{"title":144,"metaDescription":145,"keywords":146,"canonicalUrl":147,"structuredData":148},"What is CVE-2022-3916? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-3916, a medium severity cyber security vulnerability from 2023. A flaw was found in the offline_access scope in Keycloak. ...","CVE-2022-3916, CVE-2022-3916 vulnerability, CVE-2022-3916 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, redhat security, keycloak vulnerability, single_sign-on vulnerability, enterprise_linux vulnerability, openshift_container_platform vulnerability, openshift_container_platform_for_linuxone vulnerability","\u002Fwhat-is\u002Fcve-2022-3916",{"@context":149,"@type":150,"headline":144,"description":145,"datePublished":10,"dateModified":11,"author":151,"publisher":155,"about":159,"mainEntityOfPage":163,"articleSection":166,"keywords":167},"https:\u002F\u002Fschema.org","TechArticle",{"@type":152,"name":153,"url":154},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":152,"name":153,"url":154,"logo":156},{"@type":157,"url":158},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":160,"name":6,"description":161,"additionalType":162},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":164,"@id":165},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-3916","Cybersecurity","CVE-2022-3916, CVE-2022-3916 vulnerability, CVE-2022-3916 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[169,179,194],{"Operator":27,"Negate":27,"Nodes":170},[171],{"Operator":172,"Negate":27,"CPEMatch":173},"OR",[174,177],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":175,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":176,"VersionEndIncluding":27},"53DA67A0-2E85-499E-B8E1-2B12C433BC29","20.0.2",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":178,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"341E6313-20D5-44CB-9719-B20585DC5AD6",{"Operator":180,"Negate":27,"Nodes":181},"AND",[182,186],{"Operator":172,"Negate":27,"CPEMatch":183},[184],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":185,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2DEC61BC-E699-456E-99B6-C049F2A5F23F",{"Operator":172,"Negate":27,"CPEMatch":187},[188,190,192],{"Vulnerable":27,"Criteria":53,"MatchCriteriaID":189,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"142AD0DD-4CF3-4D74-9442-459CE3347E3A",{"Vulnerable":27,"Criteria":56,"MatchCriteriaID":191,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F4CFF558-3C47-480D-A2F0-BABF26042943",{"Vulnerable":27,"Criteria":59,"MatchCriteriaID":193,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7F6FB57C-2BC7-487C-96DD-132683AEB35D",{"Operator":180,"Negate":27,"Nodes":195},[196,214],{"Operator":172,"Negate":27,"CPEMatch":197},[198,200,202,204,206,208,210,212],{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":199,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"81609549-25CE-4C8A-9DE3-170D23704208",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":201,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0595C9F8-9C7A-4FC1-B7EE-52978A1B1E93",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":203,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B02036DD-4489-480B-B7D4-4EB08952377B",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":205,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C7E78C55-45B6-4E01-9773-D3468F8EA9C3",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":207,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"30E2CF79-2D56-48AB-952E-5DDAFE471073",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":209,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"54E24055-813B-4E6D-94B7-FAD5F78B8537",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":211,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CC262C4C-7B6A-4117-A50F-1FF69296DDD8",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":213,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E58526FB-522F-4AAC-B03C-9CAB443D0CFF",{"Operator":172,"Negate":27,"CPEMatch":215},[216],{"Vulnerable":27,"Criteria":56,"MatchCriteriaID":191,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},[],[],{"lastModified":11,"cacheTime":220,"version":221},1792254457335,"2.0",{"score":223,"band":224,"action":225,"scoredAt":226},23,"Low","Monitor","2026-10-16T06:59:11.947114+00:00"]