CVE-2021-20202

Name of the Vulnerable Software and Affected Versions: keycloak (affected versions not specified) redhat keycloak (affected versions not specified)

Description: A flaw was found in keycloak, allowing directories to be created with wider user permissions in the temporary directory before the Java process creates them. This gives an attacker access to the contents stored by keycloak in this directory, posing a threat to data confidentiality and integrity.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.