CVE-2020-1698

A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.
References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1698 Issue Tracking Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*

Information

Published : 2020-05-11 02:15

Updated : 2022-01-01 05:32


NVD link : CVE-2020-1698

Mitre link : CVE-2020-1698

Products Affected
No products.
CWE
CWE-532

Insertion of Sensitive Information into Log File