CVE-2020-1717
2.7LOWA flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.
게시됨: 2/11/2021업데이트됨: 11/21/2024
설명
A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.
AI 분석AI 기반
영향받는 제품
redhatkeycloak
7.0.1
redhatjboss_fuse
7.0.0
redhatopenshift_application_runtimes
-
redhatsingle_sign-on
7.0
참조
- https://bugzilla.redhat.com/show_bug.cgi?id=1796281Issue TrackingVendor Advisory
- https://issues.jboss.org/browse/KEYCLOAK-12014Issue TrackingPermissions RequiredVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1796281Issue TrackingVendor Advisory
- https://issues.jboss.org/browse/KEYCLOAK-12014Issue TrackingPermissions RequiredVendor Advisory