CVE-2020-35509

n/a / keycloak PUBLISHED

Description (CNA)

A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest threat from this vulnerability is to data confidentiality and integrity.

Affected (CNA)

Vendor / product	Versions
n/a / keycloak	affected 11.0.3, 12.0.0

CWE

CWE-20

References

https://access.redhat.com/security/cve/cve-2020-35509

ADP enrichment

CVE

No English description supplied.

https://access.redhat.com/security/cve/cve-2020-35509

CISA-ADP

No English description supplied.

No references supplied.