CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.1. See the original NVD description below for full technical details.
CVE
CVE-2020-10686
Severity
MEDIUM
CVSS
4.1
EPSS
0.65%
Original NVD Description
A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user registers as oneself. The attacker could then use the remove devices form to post different credential IDs and possibly remove MFA devices for other users.
Related CVEs
Other vulnerabilities affecting the same vendor(s)