Skip to content
Sign in
CVE-2019-101696.6MediumCWE-267

CVE-2019-10169: Redhat keycloak vulnerability

Redhat · keycloak

Affected: Redhat keycloak · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.3%probability of exploitation in the next 30 days
70th percentile
050100

Higher than 70% of scored CVEs

6.6MediumCVSS 3.1
LowMedium

DescriptionCVE.org

A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows an authenticated attacker with UMA permissions to configure a malicious script to trigger and execute arbitrary code with the permissions of the user running application.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • [UNKNOWN] · keycloak8.0.0

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Redhat
Published
May 2020

CoverageNo articles yet

No CyberSIXT article names CVE-2019-10169 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in