CVE-2020-1718CWE-287

A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0

High · published May 12, 2020

CVSS v3.1
7.1
EPSS
1%
Percentile
62.6
In the wild
Unconfirmed
What it is

A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.01004 · 62.6th percentile
Weakness
CWE-287 · Improper Authentication
Published
2020-05-12T20:25Z
EPSS history
Timeline
  • 12 MAY 20:25Z
    A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0
    cvelistv5