← CVE Intelligence

CVE-2020-1694

n/a / keycloak PUBLISHED

Description (CNA)

A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. This flaw results in some users having access to sensitive information outside of their permissions.

Affected (CNA)

Vendor / productVersions
n/a / keycloakaffected all versions before 10.0.0

CWE

CWE-183

References

ADP enrichment

CVE

No English description supplied.