PT-2021-10079
CVE-2020-1717
·
تاريخ النشر
2021-02-11
·
تاريخ التحديث
2022-02-09
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Keycloak version 7.0.1
Description:
A flaw was found in the software, allowing a logged-in user to perform an account email enumeration attack. This issue enables an attacker to identify whether a specific email address is associated with an account.
Recommendations:
For Keycloak version 7.0.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾