{"metadata": {"vulnerability": "cve-2024-3656", "count": 50, "kinds": {"milestone": 7, "sighting": 7, "kev": 0, "other": 36}}, "data": [{"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:3572", "record": "RHSA-2024:3572", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:3575", "record": "RHSA-2024:3575", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat", "record": "cve-2024-3656", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-04-11T13:57:15.173Z", "date_only": false, "value": "2024-04-11T13:57:15.173Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-3656", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-12T05:02:29.322Z", "date_only": false, "value": "2024-04-12T05:02:29.322371Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-3656", "record": "GSD-2024-3656", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-05-06T00:00:00Z", "date_only": false, "value": "2024-05-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:3572", "record": "RHSA-2024:3572", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2024-05-06T00:00:00Z", "date_only": false, "value": "2024-05-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:3575", "record": "RHSA-2024:3575", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2024-06-03T00:00:00Z", "date_only": false, "value": "2024-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:3572", "record": "RHSA-2024:3572", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2024-06-03T00:00:00Z", "date_only": false, "value": "2024-06-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:3575", "record": "RHSA-2024:3575", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2024-06-03T20:00:35Z", "date_only": false, "value": "2024-06-03T20:00:35+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:3572", "record": "RHSA-2024:3572", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-03T20:00:35Z", "date_only": false, "value": "2024-06-03T20:00:35+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2024:3572", "record": "RHSA-2024:3572", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-06-03T20:00:35Z", "date_only": false, "value": "2024-06-03T20:00:35+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024:3572", "record": "RHSA-2024:3572", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-03T21:26:15Z", "date_only": false, "value": "2024-06-03T21:26:15+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:3575", "record": "RHSA-2024:3575", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-03T21:26:15Z", "date_only": false, "value": "2024-06-03T21:26:15+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2024:3575", "record": "RHSA-2024:3575", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-06-03T21:26:15Z", "date_only": false, "value": "2024-06-03T21:26:15+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024:3575", "record": "RHSA-2024:3575", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-11T20:22:40Z", "date_only": false, "value": "2024-06-11T20:22:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2CWW-FGMG-4JQC", "record": "GHSA-2CWW-FGMG-4JQC", "field": "published"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1350", "record": "WID-SEC-W-2024-1350", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1350", "record": "WID-SEC-W-2024-1350", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1350", "record": "WID-SEC-W-2024-1350", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-10-09T18:11:00Z", "date_only": false, "value": "2024-10-09T18:11:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "cve-2024-3656", "field": "containers.cna.datePublic"}, {"timestamp": "2024-10-09T18:11:00Z", "date_only": false, "value": "2024-10-09T18:11:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:3572", "record": "RHSA-2024:3572", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-10-09T18:11:00Z", "date_only": false, "value": "2024-10-09T18:11:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:3575", "record": "RHSA-2024:3575", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-10-09T18:11:00Z", "date_only": false, "value": "2024-10-09T18:11:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat", "record": "cve-2024-3656", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2024-10-09T18:59:11.101Z", "date_only": false, "value": "2024-10-09T18:59:11.101Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-3656", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-09T19:15:13Z", "date_only": false, "value": "2024-10-09T19:15:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2CWW-FGMG-4JQC", "record": "GHSA-2CWW-FGMG-4JQC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-09T19:15:13.547Z", "date_only": false, "value": "2024-10-09T19:15:13.547", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-3656", "record": "FKIE_CVE-2024-3656", "field": "published"}, {"timestamp": "2024-10-09T19:18:03.646Z", "date_only": false, "value": "2024-10-09T19:18:03.646470Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-3656", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-09T19:18:03.646Z", "date_only": false, "value": "2024-10-09T19:18:03.646470Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-3656", "record": "FKIE_CVE-2024-3656", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-09T19:18:12.613Z", "date_only": false, "value": "2024-10-09T19:18:12.613Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-3656", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-09T22:21:05Z", "date_only": false, "value": "2024-10-09T22:21:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/7525", "record": "CVE-2024-3656", "field": "creation_timestamp", "uuid": "fdee5395-3884-4545-9e4d-50620909c5c1", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3656 - Keycloak Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-3656 \nPublished : Oct. 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/7525"}, {"timestamp": "2024-10-23T05:29:04Z", "date_only": false, "value": "2024-10-23T05:29:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1084", "record": "CVE-2024-3656", "field": "creation_timestamp", "uuid": "113a59f3-4734-498e-adff-8916288e5f04", "content": "Tools - Hackers Factory \n\nThis is the development tree. Production downloads are at:\n\nhttps://github.com/simsong/bulk_extractor\n\nZero Infrastructure Password Cracking\n\nhttps://github.com/JoelGMSec/Cloudtopolis\n\nGitHub - Exafunction/codeium-react-code-editor: AI-enabled code editor for React. Unlimited AI autocomplete capabilities with full Typescript support.\n\nhttps://github.com/Exafunction/codeium-react-code-editor\n\nA VMWare logger using built-in backdoor.\n\nhttps://github.com/Azvanzed/vmw-logger-rs\n\nProof of Concept Exploit for CVE-2024-9464\n\nhttps://github.com/horizon3ai/CVE-2024-9464\n\nNow You See Me, Now You Don't\n\nhttps://github.com/ZeroMemoryEx/Chaos-Rootkit\n\nUnauthenticated Remote Code Execution via Angular-Base64-Upload Library\n\nhttps://github.com/rvizx/CVE-2024-42640\n\nProof of concept of CVE-2024-3656 [Keycloak] low-privilege users to access administrative functionalities\n\nhttps://github.com/h4x0r-dz/CVE-2024-3656\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/1084"}, {"timestamp": "2024-10-23T05:32:04Z", "date_only": false, "value": "2024-10-23T05:32:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1085", "record": "CVE-2024-3656", "field": "creation_timestamp", "uuid": "d3707021-e42f-4800-b378-100e93b0dfcc", "content": "Tools - Hackers Factory \n\nThis is the development tree. Production downloads are at:\n\nhttps://github.com/simsong/bulk_extractor\n\nZero Infrastructure Password Cracking\n\nhttps://github.com/JoelGMSec/Cloudtopolis\n\nGitHub - Exafunction/codeium-react-code-editor: AI-enabled code editor for React. Unlimited AI autocomplete capabilities with full Typescript support.\n\nhttps://github.com/Exafunction/codeium-react-code-editor\n\nA VMWare logger using built-in backdoor.\n\nhttps://github.com/Azvanzed/vmw-logger-rs\n\nProof of Concept Exploit for CVE-2024-9464\n\nhttps://github.com/horizon3ai/CVE-2024-9464\n\nNow You See Me, Now You Don't\n\nhttps://github.com/ZeroMemoryEx/Chaos-Rootkit\n\nUnauthenticated Remote Code Execution via Angular-Base64-Upload Library\n\nhttps://github.com/rvizx/CVE-2024-42640\n\nProof of concept of CVE-2024-3656 [Keycloak] low-privilege users to access administrative functionalities\n\nhttps://github.com/h4x0r-dz/CVE-2024-3656\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/1085"}, {"timestamp": "2024-10-23T05:32:04Z", "date_only": false, "value": "2024-10-23T05:32:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3806", "record": "CVE-2024-3656", "field": "creation_timestamp", "uuid": "42678b6a-a7fc-4c96-a21c-8c31444d34ad", "content": "Tools - Hackers Factory \n\nThis is the development tree. Production downloads are at:\n\nhttps://github.com/simsong/bulk_extractor\n\nZero Infrastructure Password Cracking\n\nhttps://github.com/JoelGMSec/Cloudtopolis\n\nGitHub - Exafunction/codeium-react-code-editor: AI-enabled code editor for React. Unlimited AI autocomplete capabilities with full Typescript support.\n\nhttps://github.com/Exafunction/codeium-react-code-editor\n\nA VMWare logger using built-in backdoor.\n\nhttps://github.com/Azvanzed/vmw-logger-rs\n\nProof of Concept Exploit for CVE-2024-9464\n\nhttps://github.com/horizon3ai/CVE-2024-9464\n\nNow You See Me, Now You Don't\n\nhttps://github.com/ZeroMemoryEx/Chaos-Rootkit\n\nUnauthenticated Remote Code Execution via Angular-Base64-Upload Library\n\nhttps://github.com/rvizx/CVE-2024-42640\n\nProof of concept of CVE-2024-3656 [Keycloak] low-privilege users to access administrative functionalities\n\nhttps://github.com/h4x0r-dz/CVE-2024-3656\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3806"}, {"timestamp": "2024-10-23T06:15:12Z", "date_only": false, "value": "2024-10-23T06:15:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7527", "record": "CVE-2024-3656", "field": "creation_timestamp", "uuid": "2c5c5196-bd26-4f58-9e25-2880c6dc28e2", "content": "Tools - Hackers Factory \n\nThis is the development tree. Production downloads are at:\n\nhttps://github.com/simsong/bulk_extractor\n\nZero Infrastructure Password Cracking\n\nhttps://github.com/JoelGMSec/Cloudtopolis\n\nGitHub - Exafunction/codeium-react-code-editor: AI-enabled code editor for React. Unlimited AI autocomplete capabilities with full Typescript support.\n\nhttps://github.com/Exafunction/codeium-react-code-editor\n\nA VMWare logger using built-in backdoor.\n\nhttps://github.com/Azvanzed/vmw-logger-rs\n\nProof of Concept Exploit for CVE-2024-9464\n\nhttps://github.com/horizon3ai/CVE-2024-9464\n\nNow You See Me, Now You Don't\n\nhttps://github.com/ZeroMemoryEx/Chaos-Rootkit\n\nUnauthenticated Remote Code Execution via Angular-Base64-Upload Library\n\nhttps://github.com/rvizx/CVE-2024-42640\n\nProof of concept of CVE-2024-3656 [Keycloak] low-privilege users to access administrative functionalities\n\nhttps://github.com/h4x0r-dz/CVE-2024-3656\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7527"}, {"timestamp": "2024-10-23T06:15:18Z", "date_only": false, "value": "2024-10-23T06:15:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/24153", "record": "CVE-2024-3656", "field": "creation_timestamp", "uuid": "401d7b87-b2f4-4c7a-8159-4b55abbdedfb", "content": "Tools - Hackers Factory \n\nThis is the development tree. Production downloads are at:\n\nhttps://github.com/simsong/bulk_extractor\n\nZero Infrastructure Password Cracking\n\nhttps://github.com/JoelGMSec/Cloudtopolis\n\nGitHub - Exafunction/codeium-react-code-editor: AI-enabled code editor for React. Unlimited AI autocomplete capabilities with full Typescript support.\n\nhttps://github.com/Exafunction/codeium-react-code-editor\n\nA VMWare logger using built-in backdoor.\n\nhttps://github.com/Azvanzed/vmw-logger-rs\n\nProof of Concept Exploit for CVE-2024-9464\n\nhttps://github.com/horizon3ai/CVE-2024-9464\n\nNow You See Me, Now You Don't\n\nhttps://github.com/ZeroMemoryEx/Chaos-Rootkit\n\nUnauthenticated Remote Code Execution via Angular-Base64-Upload Library\n\nhttps://github.com/rvizx/CVE-2024-42640\n\nProof of concept of CVE-2024-3656 [Keycloak] low-privilege users to access administrative functionalities\n\nhttps://github.com/h4x0r-dz/CVE-2024-3656\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/24153"}, {"timestamp": "2024-10-23T06:15:18Z", "date_only": false, "value": "2024-10-23T06:15:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/540", "record": "CVE-2024-3656", "field": "creation_timestamp", "uuid": "e9a6231e-319f-496a-afae-df62e5c1b558", "content": "Tools - Hackers Factory \n\nThis is the development tree. Production downloads are at:\n\nhttps://github.com/simsong/bulk_extractor\n\nZero Infrastructure Password Cracking\n\nhttps://github.com/JoelGMSec/Cloudtopolis\n\nGitHub - Exafunction/codeium-react-code-editor: AI-enabled code editor for React. Unlimited AI autocomplete capabilities with full Typescript support.\n\nhttps://github.com/Exafunction/codeium-react-code-editor\n\nA VMWare logger using built-in backdoor.\n\nhttps://github.com/Azvanzed/vmw-logger-rs\n\nProof of Concept Exploit for CVE-2024-9464\n\nhttps://github.com/horizon3ai/CVE-2024-9464\n\nNow You See Me, Now You Don't\n\nhttps://github.com/ZeroMemoryEx/Chaos-Rootkit\n\nUnauthenticated Remote Code Execution via Angular-Base64-Upload Library\n\nhttps://github.com/rvizx/CVE-2024-42640\n\nProof of concept of CVE-2024-3656 [Keycloak] low-privilege users to access administrative functionalities\n\nhttps://github.com/h4x0r-dz/CVE-2024-3656\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/540"}, {"timestamp": "2024-11-14T16:58:52.300Z", "date_only": false, "value": "2024-11-14T16:58:52.300Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-3656", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-17T23:00:00Z", "date_only": false, "value": "2024-12-17T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1350", "record": "WID-SEC-W-2024-1350", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-12-17T23:00:00Z", "date_only": false, "value": "2024-12-17T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1350", "record": "WID-SEC-W-2024-1350", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-12-18T10:20:07.589Z", "date_only": false, "value": "2024-12-18T10:20:07.589+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1350", "record": "WID-SEC-W-2024-1350", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-23T17:11:17Z", "date_only": false, "value": "2024-12-23T17:11:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2CWW-FGMG-4JQC", "record": "GHSA-2CWW-FGMG-4JQC", "field": "modified"}, {"timestamp": "2026-10-09T15:35:14.704Z", "date_only": false, "value": "2026-10-09T15:35:14.704Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-3656", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-09T15:35:14.704Z", "date_only": false, "value": "2026-10-09T15:35:14.704Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "cve-2024-3656", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-09T16:17:19.977Z", "date_only": false, "value": "2026-10-09T16:17:19.977", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-3656", "record": "FKIE_CVE-2024-3656", "field": "lastModified"}, {"timestamp": "2026-10-09T17:56:14Z", "date_only": false, "value": "2026-10-09T17:56:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:3572", "record": "RHSA-2024:3572", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-09T17:56:14Z", "date_only": false, "value": "2026-10-09T17:56:14+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024:3572", "record": "RHSA-2024:3572", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-09T17:56:14Z", "date_only": false, "value": "2026-10-09T17:56:14+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024:3572", "record": "RHSA-2024:3572", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-09T17:56:16Z", "date_only": false, "value": "2026-10-09T17:56:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:3575", "record": "RHSA-2024:3575", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-09T17:56:16Z", "date_only": false, "value": "2026-10-09T17:56:16+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024:3575", "record": "RHSA-2024:3575", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-09T17:56:16Z", "date_only": false, "value": "2026-10-09T17:56:16+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024:3575", "record": "RHSA-2024:3575", "field": "document.tracking.current_release_date"}]}