CVE-2023-3597 MEDIUM

CVE-2023-3597: Keycloak: secondary factor bypass in step-up authentication

Vendor Red Hat
Product Red Hat build of Keycloak 22.0.10
Weakness CWE-287 · Improper authentication
Published April 25, 2024
Last update November 11, 2025
View on NVD All CVEs

CVSS base score

5.0/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A flaw was found in Keycloak, where it does not correctly validate its client step-up authentication in org.keycloak.authentication. This flaw allows a remote user authenticated with a password to register a false second authentication factor along with an existing one and bypass authentication.

Key dates

02Disclosure timeline

April 25, 2024 CVE published
November 11, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-33215 NATS is vulnerable to MQTT hijacking via Client ID CVE-2024-37367 Rockwell Automation FactoryTalk® View SE v12 Information Leakage Vulnerability via Authentication Restriction CVE-2026-6729 HKUDS OpenHarness Session Key Collision Privilege Escalation CVE-2026-40165 authentik: SAML NameID XML Comment Injection Enables Authentication Bypass via Identifier Truncation CVE-2019-1758 Cisco IOS Software Catalyst 6500 Series 802.1x Authentication Bypass Vulnerability