Vulnerability identifier: #VU49112

Vulnerability risk: Medium

CVSSv3.1: 4.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-27826

CWE-ID: CWE-264

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Keycloak
Server applications / Directory software, identity management

Vendor: Keycloak

Description

The vulnerability allows a remote user to escalate privileges within the application.

The vulnerability exists within the REST API functionality. Remote users can change their attributes, such as NameID and impersonate administrative users of the application.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Keycloak: 11.0.0 - 11.0.3, 7.0.0 - 7.1.0, 6.0.0 - 6.4.0, 10.0.0 - 10.0.2, 9.0.0 - 9.0.3, 8.0.0 - 8.0.2, 1.0 - 1.9.8, 2.0.0 - 2.5.10, 3.0.0 - 3.4.3, 4.0 CR1 - 4.8.3, 5.0.0, 0.6.0

---

External links
http://access.redhat.com/errata/RHSA-2020:5526
http://bugzilla.redhat.com/show_bug.cgi?id=1905089

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.