Vulnerability Database

296,746

Total vulnerabilities in the database

CVE-2020-1744

A flaw was found in keycloak before version 9.0.1. When configuring an Conditional OTP Authentication Flow as a post login flow of an IDP, the failure login events for OTP are not being sent to the brute force protection event queue. So BruteForceProtector does not handle this events.

Published: Mar 24, 2020
Updated: Nov 8, 2023
CVE: CVE-2020-1744
GHSA: GHSA-4gf2-xv97-63m2
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5.6
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-200
CWE-755

Affected Software
References

Software	From	Fixed in
redhat / keycloak	-	9.0.1
org.keycloak / keycloak-core	-	9.0.1

https://access.redhat.com/security/cve/CVE-2020-1744
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1744

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo