CVE-2020-35509 - Vulnerability Details - OpenCVE

A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest threat from this vulnerability is to data confidentiality and integrity.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Redhat	Keycloak Red Hat Single Sign On

Configuration 1 [-]

OR	cpe:2.3:a:redhat:keycloak:11.0.3:::::::*
	cpe:2.3:a:redhat:keycloak:12.0.0:::::::*

Package	CPE	Advisory	Released Date
Red Hat Single Sign-On 7.4.9
keycloak	cpe:/a:redhat:red_hat_single_sign_on:7	RHSA-2021:3534	2021-09-14T00:00:00Z
Red Hat Single Sign-On 7.4 for RHEL 6
rh-sso7-keycloak-0:9.0.15-1.redhat_00002.1.el6sso	cpe:/a:redhat:red_hat_single_sign_on:7::el6	RHSA-2021:3527	2021-09-14T00:00:00Z
Red Hat Single Sign-On 7.4 for RHEL 7
rh-sso7-keycloak-0:9.0.15-1.redhat_00002.1.el7sso	cpe:/a:redhat:red_hat_single_sign_on:7::el7	RHSA-2021:3528	2021-09-14T00:00:00Z
Red Hat Single Sign-On 7.4 for RHEL 8
rh-sso7-keycloak-0:9.0.15-1.redhat_00002.1.el8sso	cpe:/a:redhat:red_hat_single_sign_on:7::el8	RHSA-2021:3529	2021-09-14T00:00:00Z

References

Link	Providers
https://access.redhat.com/security/cve/cve-2020-35509
https://nvd.nist.gov/vuln/detail/CVE-2020-35509
https://www.cve.org/CVERecord?id=CVE-2020-35509

History

Mon, 30 Jun 2025 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2022-08-23T15:53:02.000Z

Updated: 2025-06-30T20:17:24.662Z

Reserved: 2020-12-17T00:00:00.000Z

Link: CVE-2020-35509

Vulnrichment

Updated: 2024-08-04T17:02:08.108Z

NVD

Status : Modified

Published: 2022-08-23T16:15:08.950

Modified: 2025-06-30T21:15:28.677

Link: CVE-2020-35509

Redhat

Severity : Low

Publid Date: 2021-01-04T00:00:00Z

Links: CVE-2020-35509 - Bugzilla

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:keycloak:11.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "B969F109-08D5-4A8B-B40E-F3B846EC16ED", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:keycloak:12.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "12CD4C8E-1AB9-4D25-9F59-169FB351DEE9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest threat from this vulnerability is to data confidentiality and integrity."}, {"lang": "es", "value": "Se ha encontrado un fallo en keycloak afectado a versiones 11.0.3 y 12.0.0. Un certificado caducado ser\u00eda aceptado por el autenticador de concesi\u00f3n directa debido a una falta de comprobaciones de la marca de tiempo. La mayor amenaza de esta vulnerabilidad es para la confidencialidad e integridad de los datos."}], "id": "CVE-2020-35509", "lastModified": "2025-06-30T21:15:28.677", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "[email protected]", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2022-08-23T16:15:08.950", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/security/cve/cve-2020-35509"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/security/cve/cve-2020-35509"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-295"}], "source": "[email protected]", "type": "Primary"}]}

{"acknowledgement": "Red Hat would like to thank Luca Leonardo Scorcia for reporting this issue.", "affected_release": [{"advisory": "RHSA-2021:3534", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7", "package": "keycloak", "product_name": "Red Hat Single Sign-On 7.4.9", "release_date": "2021-09-14T00:00:00Z"}, {"advisory": "RHSA-2021:3527", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el6", "package": "rh-sso7-keycloak-0:9.0.15-1.redhat_00002.1.el6sso", "product_name": "Red Hat Single Sign-On 7.4 for RHEL 6", "release_date": "2021-09-14T00:00:00Z"}, {"advisory": "RHSA-2021:3528", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el7", "package": "rh-sso7-keycloak-0:9.0.15-1.redhat_00002.1.el7sso", "product_name": "Red Hat Single Sign-On 7.4 for RHEL 7", "release_date": "2021-09-14T00:00:00Z"}, {"advisory": "RHSA-2021:3529", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el8", "package": "rh-sso7-keycloak-0:9.0.15-1.redhat_00002.1.el8sso", "product_name": "Red Hat Single Sign-On 7.4 for RHEL 8", "release_date": "2021-09-14T00:00:00Z"}], "bugzilla": {"description": "keycloak: X509 Direct Grant Auth does not verify certificate timestamp validity", "id": "1912427", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1912427"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.2", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "status": "verified"}, "cwe": "CWE-20", "details": ["A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest threat from this vulnerability is to data confidentiality and integrity.", "A flaw was found in keycloak. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest threat from this vulnerability is to data confidentiality and integrity."], "name": "CVE-2020-35509", "package_state": [{"cpe": "cpe:/a:redhat:jboss_enterprise_brms_platform:7", "fix_state": "Not affected", "package_name": "keycloak", "product_name": "Red Hat Decision Manager 7"}, {"cpe": "cpe:/a:redhat:jboss_fuse:7", "fix_state": "Not affected", "package_name": "keycloak", "product_name": "Red Hat Fuse 7"}, {"cpe": "cpe:/a:redhat:integration:1", "fix_state": "Not affected", "package_name": "keycloak", "product_name": "Red Hat Integration Camel K 1"}, {"cpe": "cpe:/a:redhat:openshift_application_runtimes:1.0", "fix_state": "Not affected", "package_name": "keycloak", "product_name": "Red Hat OpenShift Application Runtimes"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_bpms_platform:7", "fix_state": "Not affected", "package_name": "keycloak", "product_name": "Red Hat Process Automation 7"}, {"cpe": "cpe:/a:redhat:openshift_application_runtimes:1.0", "fix_state": "Not affected", "package_name": "keycloak", "product_name": "Red Hat support for Spring Boot"}], "public_date": "2021-01-04T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2020-35509\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-35509"], "threat_severity": "Low"}