Lucene search

GHSA-4GF2-XV97-63M2 Exposure of Sensitive Information in keycloak

🗓️ 20 Sep 2021 20:24:43Reported by GoogleType

osv🔗 osv.dev👁 30 Views

Exposure of Sensitive Information in keycloak due to flawed OTP Authentication Flow configuration pre-version 9.0.

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 22
Cvelist	CVE-2020-1744	24 Mar 202000:00	–	cvelist
Tenable Nessus	RHEL 8 : Red Hat Single Sign-On 7.3.7 security update on RHEL 8 (Important) (RHSA-2020:0947)	24 Mar 202000:00	–	nessus
Tenable Nessus	RHEL 7 : Red Hat Single Sign-On 7.3.7 security update on RHEL 7 (Important) (RHSA-2020:0946)	24 Mar 202000:00	–	nessus
Tenable Nessus	RHEL 6 : Red Hat Single Sign-On 7.3.7 security update on RHEL 6 (Important) (RHSA-2020:0945)	24 Mar 202000:00	–	nessus
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.3.7 security update on RHEL 7	23 Mar 202020:12	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.3.7 security update on RHEL 8	23 Mar 202020:12	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.3.7 security update on RHEL 6	23 Mar 202020:12	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat support for Spring Boot 2.2.6 security and bug fix update	1 Jun 202015:32	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.3.7 security update	23 Mar 202020:13	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat build of Thorntail 2.7.0 security and bug fix update	23 Jul 202007:03	–	redhat

Osv

Node

keycloak keycloakRange0–9.0.1

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-1744
access	www.access.redhat.com/security/cve/CVE-2020-1744
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/keycloak/keycloak

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Sep 2021 20:43Current

5.6Medium risk

Vulners AI Score5.6

CVSS26.8

CVSS35.6

EPSS0.00333