Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-1725

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-p225-pc2x-4jpm

Incorrect Authorization in keycloak A flaw was found in keycloak before version 13.0.0. In some scenarios a user still has access to a resource after changing the role mappings in Keycloak and after expiration of the previous access token.

gitlab/maven/org.keycloak/keycloak-core/CVE-2020-1725

Exposure of Resource to Wrong Sphere A flaw was found in keycloak In some scenarios a user still has access to a resource after changing the role mappings in Keycloak expiration of the previous access token.

gitlab/maven/org.keycloak/keycloak-model-jpa/CVE-2020-1725

Exposure of Resource to Wrong Sphere A flaw was found in keycloak In some scenarios a user still has access to a resource after changing the role mappings in Keycloak expiration of the previous access token.

gitlab/maven/org.keycloak/keycloak-parent/CVE-2020-1725

Incorrect Authorization A flaw was found in keycloak before version 13.0.0. In some scenarios a user still has access to a resource after changing the role mappings in Keycloak and after expiration of the previous access token.

gitlab/maven/org.keycloak/keycloak-server-spi-private/CVE-2020-1725

Exposure of Resource to Wrong Sphere A flaw was found in keycloak In some scenarios a user still has access to a resource after changing the role mappings in Keycloak expiration of the previous access token.

gitlab/maven/org.keycloak/keycloak-services/CVE-2020-1725

Exposure of Resource to Wrong Sphere A flaw was found in keycloak In some scenarios a user still has access to a resource after changing the role mappings in Keycloak expiration of the previous access token.

gitlab/maven/org.keycloak/keycloak-wildfly-server-subsystem/CVE-2020-1725

Exposure of Resource to Wrong Sphere A flaw was found in keycloak In some scenarios a user still has access to a resource after changing the role mappings in Keycloak expiration of the previous access token.