CVE-2020-1718

A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.

Score

CVSS 3.1 8.8 High

Status

Modified - secalert@redhat.com

Published

2020-05-12

Last modified

2024-08-04

Weaknesses

CWE-287

Affected products

• Keycloak (Red Hat)
• Jboss Fuse (Redhat)
• Keycloak (Redhat)
• Openshift Application Runtimes (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1718