[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f951KxopoDpKY8LeVuiSqveRsvwLoPREN7ZfUogyHHmw":3,"g5a-risk:CVE-2023-2585":199},{"success":4,"data":5,"meta":196},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":27,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":84,"references":85,"referencesCount":110,"weaknesses":111,"weaknessesCount":120,"isActivelyExploited":121,"cisaInfo":27,"otxData":27,"relatedBlogPosts":122,"seoMetadata":123,"configurations":148,"relatedVendorCves":194,"notableEvents":195},"CVE-2023-2585","What is CVE-2023-2585?","Keycloak's device authorization grant does not correctly validate the device code and client ID. An attacker client could abuse the missing validation to spoof a client consent request and trick an authorization admin into granting consent to a malicious OAuth client or possible unauthorized access to an existing OAuth client.","Keycloak's device authorization grant does not correctly validate the device code and client ID. An attacker client could abuse the missing validation to spo...","2023-12-21T10:15:34.533","2024-01-02T18:28:16.777",8.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.2,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":36,"ImpactScore":37},"secalert@redhat.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":26,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":22,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",3.5,0.9,2.5,0.00694,[38,38,38,38,38,38,38],"High",[42,47,51,54,57,61,64,68,71,74,76,79,81],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"redhat","single_sign-on","7.6","cpe:2.3:a:redhat:single_sign-on:7.6:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":49,"criteria":50,"vulnerable":4},"enterprise_linux","7.0","cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":52,"criteria":53,"vulnerable":4},"8.0","cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":55,"criteria":56,"vulnerable":4},"9.0","cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",{"vendor":43,"product":58,"version":59,"criteria":60,"vulnerable":4},"openshift_container_platform","4.11","cpe:2.3:a:redhat:openshift_container_platform:4.11:*:*:*:*:*:*:*",{"vendor":43,"product":58,"version":62,"criteria":63,"vulnerable":4},"4.12","cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:*",{"vendor":43,"product":65,"version":66,"criteria":67,"vulnerable":4},"openshift_container_platform_for_ibm_z","4.9","cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.9:*:*:*:*:*:*:*",{"vendor":43,"product":65,"version":69,"criteria":70,"vulnerable":4},"4.10","cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.10:*:*:*:*:*:*:*",{"vendor":43,"product":72,"version":66,"criteria":73,"vulnerable":4},"openshift_container_platform_for_linuxone","cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.9:*:*:*:*:*:*:*",{"vendor":43,"product":72,"version":69,"criteria":75,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.10:*:*:*:*:*:*:*",{"vendor":43,"product":77,"version":66,"criteria":78,"vulnerable":4},"openshift_container_platform_for_power","cpe:2.3:a:redhat:openshift_container_platform_for_power:4.9:*:*:*:*:*:*:*",{"vendor":43,"product":77,"version":69,"criteria":80,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_for_power:4.10:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":82,"criteria":83,"vulnerable":4},"-","cpe:2.3:a:redhat:single_sign-on:-:*:*:*:text-only:*:*:*",13,[86,91,94,97,100,103,106],{"url":87,"source":88,"tags":89},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:3883","Red Hat",[90],"Vendor Advisory",{"url":92,"source":88,"tags":93},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:3884",[90],{"url":95,"source":88,"tags":96},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:3885",[90],{"url":98,"source":88,"tags":99},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:3888",[90],{"url":101,"source":88,"tags":102},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2023:3892",[90],{"url":104,"source":88,"tags":105},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2023-2585",[90],{"url":107,"source":88,"tags":108},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2196335",[109,90],"Issue Tracking",7,[112],{"id":113,"name":114,"description":115,"extendedDescription":116,"status":117,"abstraction":118,"structure":119},"CWE-358","Improperly Implemented Security Check for Standard","The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.","","Draft","Base","Simple",1,false,[],{"title":124,"metaDescription":125,"keywords":126,"canonicalUrl":127,"structuredData":128},"What is CVE-2023-2585? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-2585, a high severity cyber security vulnerability from 2023. Keycloak's device authorization grant does not correctly val...","CVE-2023-2585, CVE-2023-2585 vulnerability, CVE-2023-2585 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, redhat security, single_sign-on vulnerability, enterprise_linux vulnerability, openshift_container_platform vulnerability, openshift_container_platform_for_ibm_z vulnerability, openshift_container_platform_for_linuxone vulnerability","\u002Fwhat-is\u002Fcve-2023-2585",{"@context":129,"@type":130,"headline":124,"description":125,"datePublished":10,"dateModified":11,"author":131,"publisher":135,"about":139,"mainEntityOfPage":143,"articleSection":146,"keywords":147},"https:\u002F\u002Fschema.org","TechArticle",{"@type":132,"name":133,"url":134},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":132,"name":133,"url":134,"logo":136},{"@type":137,"url":138},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":140,"name":6,"description":141,"additionalType":142},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":144,"@id":145},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-2585","Cybersecurity","CVE-2023-2585, CVE-2023-2585 vulnerability, CVE-2023-2585 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[149,165,188],{"Operator":150,"Negate":27,"Nodes":151},"AND",[152,157],{"Operator":153,"Negate":27,"CPEMatch":154},"OR",[155],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":156,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2DEC61BC-E699-456E-99B6-C049F2A5F23F",{"Operator":153,"Negate":27,"CPEMatch":158},[159,161,163],{"Vulnerable":27,"Criteria":50,"MatchCriteriaID":160,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"142AD0DD-4CF3-4D74-9442-459CE3347E3A",{"Vulnerable":27,"Criteria":53,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F4CFF558-3C47-480D-A2F0-BABF26042943",{"Vulnerable":27,"Criteria":56,"MatchCriteriaID":164,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7F6FB57C-2BC7-487C-96DD-132683AEB35D",{"Operator":150,"Negate":27,"Nodes":166},[167,185],{"Operator":153,"Negate":27,"CPEMatch":168},[169,171,173,175,177,179,181,183],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":170,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EA983F8C-3A06-450A-AEFF-9429DE9A3454",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":172,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"40449571-22F8-44FA-B57B-B43F71AB25E2",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":174,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"01B0F191-ADDB-4AAE-A5C5-5CC16909E64A",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":176,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FD75BCB4-F0E1-4C05-A2D7-001503C805C9",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":178,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B02036DD-4489-480B-B7D4-4EB08952377B",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":180,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C7E78C55-45B6-4E01-9773-D3468F8EA9C3",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":182,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"30E2CF79-2D56-48AB-952E-5DDAFE471073",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":184,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"54E24055-813B-4E6D-94B7-FAD5F78B8537",{"Operator":153,"Negate":27,"CPEMatch":186},[187],{"Vulnerable":27,"Criteria":53,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},{"Operator":27,"Negate":27,"Nodes":189},[190],{"Operator":153,"Negate":27,"CPEMatch":191},[192],{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":193,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"341E6313-20D5-44CB-9719-B20585DC5AD6",[],[],{"lastModified":11,"cacheTime":197,"version":198},1792255710169,"2.0",{"score":200,"band":201,"action":202,"scoredAt":203},47,"Medium","Plan remediation","2026-10-16T07:00:12.354935+00:00"]