A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching
    information about PUBLIC clients (like client secret) without authentication which could be an issue if
    the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to
    data confidentiality. (CVE-2020-27838)

Keycloak versions before 13.0.0 suffer from an information disclosure vulnerability. By requesting the client registration endpoint, a remote and unauthenticated attacker could retrieve information about public clients which could be sensitive if these clients move to the 'confidential' access type.

ID	Name	Product	Family	Type	Severity
437171	SCA: security update for org.keycloak:keycloak-core (GHSA-pcv5-m2wh-66j3)	Tenable Cloud Security	SCA Checks	Local	medium
437171	SCA: security update for org.keycloak:keycloak-core (GHSA-pcv5-m2wh-66j3)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
114260	Keycloak Information Disclosure	Web App Scanning	Component Vulnerability	Check Based	medium

Detections

Analytics

CVE-2020-27838

medium

Tenable Plugins

medium

medium

medium