CVE-2020-1725CWE-863

A flaw was found in keycloak before version 13.0.0

published January 28, 2021

CVSS
—
EPSS
1%
Percentile
51.9
In the wild
Unconfirmed
What it is

A flaw was found in keycloak before version 13.0.0. In some scenarios a user still has access to a resource after changing the role mappings in Keycloak and after expiration of the previous access token.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00683 · 51.9th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2021-01-28T19:05Z
EPSS history
Timeline
  • 28 JAN 19:05Z
    A flaw was found in keycloak before version 13.0.0
    cvelistv5