Aller au contenu
Se connecter
4.1 Moyenne

CVE-2020-10686 A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user…

Description

A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user registers as oneself. The attacker could then use the remove devices form to post different credential IDs and possibly remove MFA devices for other users.

Produits et versions touchés

Produit Versions touchées Corrigé en
keycloak 9.0.0 Pas de correctif indiqué
keycloak 8.0.2 Pas de correctif indiqué

Autres CVE de keycloak

Les 15 CVE de keycloak →
CVE-2026-90997 A flaw was found in Keycloak 7.4 Élevée CVE-2026-1609 A flaw was found in Keycloak 8.1 Élevée CVE-2025-12150 A flaw was found in Keycloak’s WebAuthn registration component 3.1 Faible CVE-2025-13467 A flaw was found in the Keycloak LDAP User Federation provider 5.5 Moyenne
Suivre cette CVE