Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

redhat логотип

CVE-2020-1694

около 6 лет назад

A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to sensitive information outside of their permissions.

CVSS3: 3.3
EPSS: Низкий
nvd логотип

CVE-2020-1694

почти 6 лет назад

A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to sensitive information outside of their permissions.

CVSS3: 4.9
EPSS: Низкий
debian логотип

CVE-2020-1694

почти 6 лет назад

A flaw was found in all versions of Keycloak before 10.0.0, where the ...

CVSS3: 4.9
EPSS: Низкий
github логотип

GHSA-72j4-94rx-cr6w

больше 4 лет назад

Incorrect Permission Assignment for Critical Resource and Permissive List of Allowed Inputs in Keycloak

CVSS3: 4.9
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2020-1694

A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to sensitive information outside of their permissions.

CVSS3: 3.3
2%
Низкий
около 6 лет назад
nvd логотип
CVE-2020-1694

A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to sensitive information outside of their permissions.

CVSS3: 4.9
2%
Низкий
почти 6 лет назад
debian логотип
CVE-2020-1694

A flaw was found in all versions of Keycloak before 10.0.0, where the ...

CVSS3: 4.9
2%
Низкий
почти 6 лет назад
github логотип
GHSA-72j4-94rx-cr6w

Incorrect Permission Assignment for Critical Resource and Permissive List of Allowed Inputs in Keycloak

CVSS3: 4.9
2%
Низкий
больше 4 лет назад

Уязвимостей на страницу