Lucene search
GoogleOSV:GHSA-M9CJ-V55F-8X26HistoryMar 18, 2022 - 5:55 p.m.
Authentication Bypass in keycloak
2022-03-1817:55:26
Google
osv.dev
27
0.001 Low
EPSS
Percentile
22.7%
A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user’s metadata attributes using Account REST API. This flaw allows an attacker to change its own NameID attribute to impersonate the admin user for any particular application.
Related
redhat
redhat
(RHSA-2020:5526) Low: Red Hat Single Sign-On 7.4.4 security update on RHEL 6
2020-12-15 16:52:18
(RHSA-2020:5527) Low: Red Hat Single Sign-On 7.4.4 security update on RHEL 7
2020-12-15 16:52:26
(RHSA-2020:5528) Low: Red Hat Single Sign-On 7.4.4 security update on RHEL 8
2020-12-15 16:52:33
github
github
Authentication Bypass in keycloak
2022-03-18 17:55:26
nessus
nessus
osv
osv
CVE-2020-27826
2021-05-28 11:15:07
veracode
veracode
Privilege Escalation
2020-12-19 05:51:29
redhatcve
redhatcve
CVE-2020-27826
2020-12-07 17:29:54
cve
cve
CVE-2020-27826
2021-05-28 11:15:07
prion
prion
Design/Logic Flaw
2021-05-28 11:15:00
cvelist
cvelist
CVE-2020-27826
2021-05-28 10:20:30
nvd
nvd
CVE-2020-27826
2021-05-28 11:15:07