Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-3916

23
FAUCET Score

CVE-2022-3916 is a medium-severity flaw in Keycloak's offline_access scope, affecting Red Hat products like Keycloak, Enterprise Linux, and OpenShift Container Platform. It allows an attacker to reuse session IDs across root and user authentication sessions, enabling them to obtain a token for a previously authenticated user by leveraging a refresh token. The vulnerability has a CVSS score of 6.8, indicating a network attack vector with high attack complexity and high confidentiality and integrity impacts. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 20.0.2CPE matchmatch criteria
cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:redhat:single_sign-on:-:*:*:*:text-only:*:*:*
7.6CPE matchmatch criteria
cpe:2.3:a:redhat:single_sign-on:7.6:*:*:*:*:*:*:*
4.9CPE matchmatch criteria
cpe:2.3:a:redhat:openshift_container_platform:4.9:*:*:*:*:*:*:*
4.10CPE matchmatch criteria
cpe:2.3:a:redhat:openshift_container_platform:4.10:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.8MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
1.6
Impact Score
5.2
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.95%
Probability of exploitation in next 30 days
EPSS Percentile
57.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0095 is in the 50th percentile among its peer group of 1,428 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (12)

mavenpatch availablevia ghsa
Product: org.keycloak:keycloak-parentFixed in: 20.0.2
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7Fixed in: rh-sso7-keycloak
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6.1Fixed in: rh-sso7-keycloak
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 7Fixed in: rh-sso7-keycloak-0:18.0.3-1.redhat_00002.1.el7sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 7Fixed in: rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el7sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 8Fixed in: rh-sso7-keycloak-0:18.0.3-1.redhat_00002.1.el8sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 8Fixed in: rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el8sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 9Fixed in: rh-sso7-keycloak-0:18.0.3-1.redhat_00002.1.el9sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 9Fixed in: rh-sso7-keycloak-0:18.0.6-1.redhat_00001.1.el9sso
View patch
redhatpatch availablevia redhat_api
Product: RHEL-8 based Middleware ContainersFixed in: rh-sso-7/sso76-openshift-rhel8:7.6-15
View patch
redhatpatch availablevia redhat_api
Product: RHEL-8 based Middleware ContainersFixed in: rh-sso-7/sso76-openshift-rhel8:7.6-20
View patch
redhatvendor investigatingvia nvd_reference
View patch

Vendor Advisories (2)

mavenGHSA-97g8-xfvw-q4hgmedium

Keycloak vulnerable to session takeover with OIDC offline refreshtokens

Dec 13, 2022
redhatCVE-2022-3916Moderate

keycloak: Session takeover with OIDC offline refreshtokens

Nov 9, 2022

References

access.redhat.com / errata/RHSA-2022:8961
Vendor Advisory
access.redhat.com / errata/RHSA-2022:8962
Vendor Advisory
access.redhat.com / errata/RHSA-2022:8963
Vendor Advisory
access.redhat.com / errata/RHSA-2022:8964
Vendor Advisory
access.redhat.com / errata/RHSA-2022:8965
Vendor Advisory
access.redhat.com / errata/RHSA-2023:1043
Vendor Advisory
access.redhat.com / errata/RHSA-2023:1044
Vendor Advisory
access.redhat.com / errata/RHSA-2023:1045
Vendor Advisory
access.redhat.com / errata/RHSA-2023:1047
Vendor Advisory
access.redhat.com / errata/RHSA-2023:1049
Vendor Advisory
access.redhat.com / security/cve/CVE-2022-3916
Vendor Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingVendor Advisory