Логотип exploitDog
bind:CVE-2020-27838
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-27838

Количество 4

Количество 4

redhat логотип

CVE-2020-27838

около 5 лет назад

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.

CVSS3: 5.3
EPSS: Высокий
nvd логотип

CVE-2020-27838

почти 5 лет назад

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.

CVSS3: 6.5
EPSS: Высокий
debian логотип

CVE-2020-27838

почти 5 лет назад

A flaw was found in keycloak in versions prior to 13.0.0. The client r ...

CVSS3: 6.5
EPSS: Высокий
github логотип

GHSA-pcv5-m2wh-66j3

больше 3 лет назад

Keycloak discloses information without authentication

CVSS3: 6.5
EPSS: Высокий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2020-27838

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.

CVSS3: 5.3
78%
Высокий
около 5 лет назад
nvd логотип
CVE-2020-27838

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.

CVSS3: 6.5
78%
Высокий
почти 5 лет назад
debian логотип
CVE-2020-27838

A flaw was found in keycloak in versions prior to 13.0.0. The client r ...

CVSS3: 6.5
78%
Высокий
почти 5 лет назад
github логотип
GHSA-pcv5-m2wh-66j3

Keycloak discloses information without authentication

CVSS3: 6.5
78%
Высокий
больше 3 лет назад

Уязвимостей на страницу