CVE-2024-0560

Summary

CVE-2024-0560 is a vulnerability affecting 3Scale, an component used with Keycloak 15 (or Red Hat Single Sign-On 7.5.0). When the "auth_type" is set to "use_3scale_oidc_issuer_endpoint," the Token Introspection policy relies on the "token_introspection_endpoint" field to determine the location for token verification. However, this field was removed in RH-SSO 7.5. Consequently, the Token Introspection policy fails to inspect tokens, deeming all tokens as valid, potentially leading to unauthorized access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.