Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2021-20262
A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password. This flaw allows an attacker to take over an account if they can obtain temporary, physical access to a user’s browser. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
| Software | From | Fixed in |
|---|---|---|
| redhat / single_sign-on | 7.0 | 7.0.x |
| redhat / keycloak | 12.0.0 | 12.0.0.x |
org.keycloak / keycloak-core
|
- | 12.0.4.x |