ZeroHour

CVE-2020-1717

CVSS 3.1
2.7 low
EPSS
<1%p53
Published
()
Modified
Description

A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.

Vendors
redhat
Products
keycloak, jboss fuse, openshift application runtimes, single sign-on
Weakness
CWE-209
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

In the news

No ingested article mentions this CVE yet.