CVE-2020-1717
2.7LOWA flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.
Veröffentlicht: 2/11/2021Aktualisiert: 11/21/2024
Beschreibung
A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.
KI-AnalyseKI-gestützt
Betroffene Produkte
redhatkeycloak
7.0.1
redhatjboss_fuse
7.0.0
redhatopenshift_application_runtimes
-
redhatsingle_sign-on
7.0
Referenzen
- https://bugzilla.redhat.com/show_bug.cgi?id=1796281Issue TrackingVendor Advisory
- https://issues.jboss.org/browse/KEYCLOAK-12014Issue TrackingPermissions RequiredVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1796281Issue TrackingVendor Advisory
- https://issues.jboss.org/browse/KEYCLOAK-12014Issue TrackingPermissions RequiredVendor Advisory