← All advisories

Medium severity4.3NVD Advisory· Published Nov 13, 2019· Updated Jun 17, 2026

CVE-2014-3655

CVE-2014-3655

Description

JBoss KeyCloak is vulnerable to soft token deletion via CSRF

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.keycloak:keycloak-servicesMaven	< 1.0.2.Final	1.0.2.Final

Affected products

2

ghsa-coords
pkg:maven/org.keycloak/keycloak-services
Range: < 1.0.2.Final
JBoss/KeyCloakv5
Range: Fixed in version 1.1.0-Alpha1

Patches

Vulnerability mechanics

References

8

access.redhat.com/security/cve/cve-2014-3655nvdVendor AdvisoryWEB
bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor AdvisoryWEB
github.com/advisories/GHSA-237q-6hjp-pchqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2014-3655ghsaADVISORY
snyk.io/vuln/SNYK-JAVA-ORGKEYCLOAK-30138nvdThird Party AdvisoryWEB
github.com/keycloak/keycloak/commit/0b8b31a3ea7d8d7ac8b14a020613fc32aa5e9d9dghsaWEB
github.com/keycloak/keycloak/pull/703ghsaWEB
github.com/victims/victims-cve-db/blob/master/database/java/2014/3655.yamlghsaWEB

News mentions

0

No linked articles in our index yet.