CVE-2020-1718 Improper Authentication for Keycloak

What is CVE-2020-1718?

CVE-2020-1718 is a high-severity authentication bypass vulnerability in Redhat Keycloak, published on 12 May 2020. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.

Weakness: CWE-287

Which versions are affected by CVE-2020-1718?

2 open source packages ship an affected version, including org.keycloak:keycloak-parent. It affects 3 products.

Products include Redhat Jboss Fuse, Redhat Keycloak, Redhat Openshift Application Runtimes.

How do I fix CVE-2020-1718?

Upgrade org.keycloak:keycloak-parent to 8.0.0 or later.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2020-1718 being exploited?

There is no known exploitation of CVE-2020-1718 in the wild and no public exploit code.

Other vulnerabilities in Redhat Keycloak

• CVE-2020-27782 Denial of service in Undertow High 7.5
• CVE-2020-10718 Security feature bypass in Wildfly High 7.5
• CVE-2016-1000229 Improper Neutralization of Input During Web Page Generation in swagger-ui Medium 6.1
• CVE-2014-8175 Auth bypass in n/a Medium 6.0
• CVE-2020-10734 OIDC Logout redirect in keycloak Low 3.3

All Redhat Keycloak vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-j229-2h63-rvh9.