Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-1698

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-qgmm-f2qw-r95f

Keycloak leaks sensitive information in logged exceptions A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.

gitlab/maven/org.keycloak/keycloak-authz-client/CVE-2020-1698

Information Exposure A flaw was found in keycloak A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.

gitlab/maven/org.keycloak/keycloak-core/CVE-2020-1698

Information Exposure A flaw was found in keycloak. A logged exception in the `HttpMethod` class may leak the password given as parameter.

gitlab/npm/keycloak-connect/CVE-2020-1698

Information Exposure A logged exception in the `HttpMethod` class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.