Read the docs
TI-2020-01662 Aliases CVE-2020-1718GHSA-j229-2h63-rvh9

Improper authentication in Red Hat keycloak

Priority MEDIUM 40CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 8 fixed, 2 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-287.

Summary

A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.

Why it matters now

EPSS 0.01004 63rd percentileScored 2026-11-07
Fix Partial org.keycloak:keycloak-parent (Maven): 8.0.0Red Hat: 8 advisoriesRed Hat: 8 fixed, 2 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red Hatkeycloakbefore 8.0.08.0.0Patch availableCNA
—org.keycloak:keycloak-parent (Maven)before 8.0.08.0.0Patch availableGHSA-j229-2h63-rvh9
  • keycloak VendorRed Hat Affected before 8.0.0 Fixed in 8.0.0 Patch available CNA
  • org.keycloak:keycloak-parent (Maven) Vendor— Affected before 8.0.0 Fixed in 8.0.0 Patch available GHSA-j229-2h63-rvh9

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*7.0.0VulnerableRed Hat
cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*before 8.0.0VulnerableRed Hat
cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
  • cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:* Versions 7.0.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:* Versions before 8.0.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat

Remediation

  • Fix · GHSA-j229-2h63-rvh9 org.keycloak:keycloak-parent (Maven) Fixed in 8.0.0 Advisory →

Red Hat 8 advisories

  • RHSA-2020:3197 Released 2020-07-29 · Red Hat rating Important
    Red Hat Process Automation Manager 7.8.0 Security Update
    • Red Hat Process Automation 7
  • RHSA-2020:3196 Released 2020-07-29 · Red Hat rating Important
    Red Hat Decision Manager 7.8.0 Security Update
    • Red Hat Decision Manager 7
  • RHSA-2020:2905 Released 2020-07-23 · Red Hat rating Important
    Red Hat build of Thorntail 2.7.0 security and bug fix update
    • Text-Only RHOAR
Show 5 more Red Hat advisories
  • RHSA-2020:2252 Released 2020-06-01 · Red Hat rating Important
    Red Hat support for Spring Boot 2.2.6 security and bug fix update
    • Red Hat Runtimes Spring Boot 2.2.6
  • RHSA-2020:2112 Released 2020-05-12 · Red Hat rating Important
    Red Hat Single Sign-On 7.3.8 security update
    • Red Hat Single Sign On 7.3.8
  • RHSA-2020:2108 Released 2020-05-12 · Red Hat rating Important
    Red Hat Single Sign-On 7.3.8 security update on RHEL 8
    • Red Hat Single Sign-On 7.3 for RHEL 8 rh-sso7-keycloak-4.8.20-1.Final_redhat_00001.1.el8sso, rh-sso7-keycloak-server-4.8.20-1.Final_redhat_00001.1.el8sso
  • RHSA-2020:2106 Released 2020-05-12 · Red Hat rating Important
    Red Hat Single Sign-On 7.3.8 security update on RHEL 6
    • Red Hat Single Sign-On 7.3 for RHEL 6 Server rh-sso7-keycloak-4.8.20-1.Final_redhat_00001.1.el6sso, rh-sso7-keycloak-server-4.8.20-1.Final_redhat_00001.1.el6sso
  • RHSA-2020:2107 Released 2020-05-12 · Red Hat rating Important
    Red Hat Single Sign-On 7.3.8 security update on RHEL 7
    • Red Hat Single Sign-On 7.3 for RHEL 7 Server rh-sso7-keycloak-4.8.20-1.Final_redhat_00001.1.el7sso, rh-sso7-keycloak-server-4.8.20-1.Final_redhat_00001.1.el7sso

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift Application RuntimesAffectedNo fix yet
Red Hat support for Spring BootAffectedNo fix yet
Red Hat Decision Manager 7Fixed RHSA-2020:3196
Red Hat Process Automation 7Fixed RHSA-2020:3197
Red Hat Runtimes Spring Boot 2.2.6Fixed RHSA-2020:2252
Red Hat Single Sign On 7.3.8Fixed RHSA-2020:2112
Red Hat Single Sign-On 7.3 for RHEL 6 ServerFixed RHSA-2020:2106
Red Hat Single Sign-On 7.3 for RHEL 7 ServerFixed RHSA-2020:2107
Red Hat Single Sign-On 7.3 for RHEL 8Fixed RHSA-2020:2108
Text-Only RHOARFixed RHSA-2020:2905
Not affected: 1 product
  • Red Hat Fuse 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-1718
  2. 2026-10-03 Alias added: GHSA-j229-2h63-rvh9

References

Advisory 2

  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2015-06239 Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data… CVSS 3.0CRITICAL 9.8
  • TI-2021-02983 Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVSS 3.1HIGH 7.5
  • TI-2019-11096 Information disclosure in Red Hat jackson-databind CVSS 3.1CRITICAL 9.8
  • TI-2019-07493 XML external entity injection in Red Hat jackson-mapper-asl CVSS 3.1HIGH 7.5
  • TI-2014-00115 The admin terminal in Hawt.io does not require authentication, which allows remote… CVSS 3.0CRITICAL 9.8
See all 41 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences