CVE-2020-14389

HIGH · CVSS 8.1 EPSS 0.81%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-11-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-14389

Severity

HIGH

CVSS

8.1

EPSS

0.81%

Original NVD Description

It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing access and modification of data the user was not intended to have.