PT-2021-10079
CVE-2020-1717
·
Published
2021-02-11
·
Updated
2022-02-09
Description by
CVSS 2.0
4.0
MediumMetricsAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Keycloak version 7.0.1
Description:
A flaw was found in the software, allowing a logged-in user to perform an account email enumeration attack. This issue enables an attacker to identify whether a specific email address is associated with an account.
Recommendations:
For Keycloak version 7.0.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾