CVE-2020-1724

published 2020-05-11

CVE-2020-1724: A flaw was found in Keycloak in versions before 9.0.2. This flaw allows a malicious user that is currently logged in, to see the personal information of a…

medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

A flaw was found in Keycloak in versions before 9.0.2. This flaw allows a malicious user that is currently logged in, to see the personal information of a previously logged out user in the account manager section.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
red_hat	keycloak	—	—
redhat	keycloak	< 9.0.2	9.0.2
redhat	single_sign-on	—	—

CWE-613