Executive brief
Keycloak users may be able to remove MFA from other users' devices
Affected products
- Maven org.keycloak:keycloak-core
Junglewise Threat Intelligence
CVE-2020-10686: Keycloak users may be able to remove MFA from other users' devices
CVE-2020-10686 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: org.keycloak:keycloak-core (Maven). Vendors: Maven.