In breve
- CVE-2020-1758 è una vulnerabilità MEDIO (CVSS 5.9) che riguarda org.keycloak:keycloak-parent, keycloak (redhat), openstack (redhat).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.93%, superiore al 60.6% delle vulnerabilità.
- Correzione: aggiornare a 10.0.0 o successiva.
Description
A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle (MITM) attack.
NVD description
A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle (MITM) attack.
Altre vulnerabilità di org.keycloak:keycloak-parent
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free