Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

redhat логотип

CVE-2020-27838

больше 5 лет назад

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.

CVSS3: 5.3
EPSS: Средний
nvd логотип

CVE-2020-27838

больше 5 лет назад

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.

CVSS3: 6.5
EPSS: Средний
debian логотип

CVE-2020-27838

больше 5 лет назад

A flaw was found in keycloak in versions prior to 13.0.0. The client r ...

CVSS3: 6.5
EPSS: Средний
github логотип

GHSA-pcv5-m2wh-66j3

больше 4 лет назад

Keycloak discloses information without authentication

CVSS3: 6.5
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2020-27838

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.

CVSS3: 5.3
18%
Средний
больше 5 лет назад
nvd логотип
CVE-2020-27838

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.

CVSS3: 6.5
18%
Средний
больше 5 лет назад
debian логотип
CVE-2020-27838

A flaw was found in keycloak in versions prior to 13.0.0. The client r ...

CVSS3: 6.5
18%
Средний
больше 5 лет назад
github логотип
GHSA-pcv5-m2wh-66j3

Keycloak discloses information without authentication

CVSS3: 6.5
18%
Средний
больше 4 лет назад

Уязвимостей на страницу