CVE-2018-10894

MEDIUM · CVSS 5.4 EPSS 0.35%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-08-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-10894

Severity

MEDIUM

CVSS

5.4

EPSS

0.35%

Original NVD Description

It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.