CVE-2020-1698 — Red Hat / keycloak

CVE-2020-1698

Red Hat / keycloak PUBLISHED

Description (CNA)

A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.

Affected (CNA)

Vendor / product	Versions
Red Hat / keycloak	affected All versions before 9.0.0

CWE

CWE-200

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1698

ADP enrichment

CVE

No English description supplied.

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1698