CVE-2023-2585

CVE-2023-2585 describes a critical vulnerability in Keycloak's device authorization grant, affecting Red Hat Enterprise Linux and OpenShift Container Platform, among other Red Hat products. The flaw stems from insufficient validation of device codes and client IDs, allowing an attacker to spoof client consent requests. This could trick an authorization administrator into granting consent to a malicious OAuth client, leading to unauthorized access. Rated 8.1 HIGH on the CVSS scale, this vulnerability is network-exploitable with low attack complexity, requiring user interaction, and can result in high confidentiality and integrity impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.