CVE-2020-1724

Name of the Vulnerable Software and Affected Versions Keycloak versions prior to 9.0.2 Redhat Keycloak (affected versions not specified) Redhat Openshift Application Runtimes (affected versions not specified) Redhat Single Sign-On (affected versions not specified)

Description A flaw in the software allows a malicious user who is currently logged in to see the personal information of a previously logged out user in the account manager section.

Recommendations For Keycloak versions prior to 9.0.2, update to version 9.0.2 or later to resolve the issue. At the moment, there is no information about a newer version that contains a fix for Redhat Keycloak, Redhat Openshift Application Runtimes, and Redhat Single Sign-On.