Low severity2.7NVD Advisory· Published Feb 11, 2021· Updated Jun 17, 2026
CVE-2020-1717
CVE-2020-1717
Description
A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.keycloak:keycloak-parentMaven | <= 7.0.1 | — |
Affected products
6- cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor AdvisoryWEB
- github.com/advisories/GHSA-rvfc-g8j5-9ccfghsaADVISORY
- issues.jboss.org/browse/KEYCLOAK-12014nvdIssue TrackingPermissions RequiredVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2020-1717ghsaADVISORY
News mentions
0No linked articles in our index yet.