Moole Vulnerability Database

Find real vulnerabilities before they ship

Low

CVE-2020-1717

A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.

VectorNETWORK

PublishedFeb 11, 2021, 18:15

Published Bysecalert@redhat.com

Base Score

Score2.7

Package (Ecosystem)IntroducedFixedLimit

org.keycloak:keycloak-parent(Maven)0N/AN/A

CWE-209

Base Score

2.7

Vector String

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Base SeverityLow

Version

3.1

Attack Vector (AV)

NETWORK