GHSA-j229-2h63-rvh9

ghsaUSosv

Improper Authentication for Keycloak

view advisory published 2022-02-09Licence: CC-BY-4.0

A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-1718US	high8.8	1.00% (63rd)	—	2020-05-12
A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1718WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-1718ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan