Lucene search
GitHub Advisory DatabaseGHSA-M9CJ-V55F-8X26HistoryMar 18, 2022 - 5:55 p.m.
Authentication Bypass in keycloak
2022-03-1817:55:26
CWE-250
GitHub Advisory Database
github.com
108
0.001 Low
EPSS
Percentile
22.4%
A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user’s metadata attributes using Account REST API. This flaw allows an attacker to change its own NameID attribute to impersonate the admin user for any particular application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.keycloak:keycloak-core | lt | 12.0.0 |
Related
osv
osv
Authentication Bypass in keycloak
2022-03-18 17:55:26
CVE-2020-27826
2021-05-28 11:15:07
redhat
redhat
(RHSA-2020:5526) Low: Red Hat Single Sign-On 7.4.4 security update on RHEL 6
2020-12-15 16:52:18
(RHSA-2020:5528) Low: Red Hat Single Sign-On 7.4.4 security update on RHEL 8
2020-12-15 16:52:33
(RHSA-2020:5527) Low: Red Hat Single Sign-On 7.4.4 security update on RHEL 7
2020-12-15 16:52:26
nessus
nessus
prion
prion
Design/Logic Flaw
2021-05-28 11:15:00
cvelist
cvelist
CVE-2020-27826
2021-05-28 10:20:30
redhatcve
redhatcve
CVE-2020-27826
2020-12-07 17:29:54
cve
cve
CVE-2020-27826
2021-05-28 11:15:00
veracode
veracode
Privilege Escalation
2020-12-19 05:51:29