CVE-2020-14389CWE-916

It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing…

published November 17, 2020

CVSS
—
EPSS
1%
Percentile
56.9
In the wild
Unconfirmed
What it is

It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing access and modification of data the user was not intended to have.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00822 · 56.9th percentile
Weakness
CWE-916 · Use of Password Hash With Insufficient Computational Effort
Published
2020-11-17T00:00Z
EPSS history
Timeline
  • 17 NOV 00:00Z
    It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing…
    cvelistv5