CVE-2021-3754

CVE-2021-3754 该仓库记录了由本人于2021年8月21日发现并报告的CVE-2021-3754漏洞详情及利用方法。 指标 CWE-20: 输入验证不恰当 CVSS: 5.3（中危） 描述 在Apache Keycloak和Redhat SSO中发现一个缺陷：攻击者能够以与任何现有用户邮箱相同的用户名进行注册。 这是由于用户名在邮箱之前被评估所致。 Keycloak允许将邮箱用作用户名，且未检查该邮箱是否已存在对应账户。 影响 上述行为会导致用户忘记密码时无法正常收到密码恢复邮件，从而暂时锁定用户账户。 缓解措施（Redhat建议）...

EUVD-2020-3127

Malware in sbrugna...

CVE-2020-10695

An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access to the container can use this flaw to modify the /etc/passwd and escalate their privileges...

CVE-2020-10695

An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access to the container can use this flaw to modify the /etc/passwd and escalate their privileges...

Design/Logic Flaw

An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access to the container can use this flaw to modify the /etc/passwd and escalate their privileges...

CVE-2020-10695

An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access to the container can use this flaw to modify the /etc/passwd and escalate their privileges...

CVE-2020-10695

An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access to the container can use this flaw to modify the /etc/passwd and escalate their privileges...

PT-2021-9167

Name of the Vulnerable Software and Affected Versions redhat-sso-7 container affected versions not specified Description An insecure modification flaw in the /etc/passwd file was found in the container. An attacker with access to the container can use this flaw to modify the /etc/passwd and...

CVE-2020-10695: Incorrect Privilege Assignment

An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access to the container can use this flaw to modify the /etc/passwd and escalate their privileges...