1. Home
  2. CVE Database
  3. CVE-2021-20202
HIGH · 7.3

CVE-2021-20202

A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary directory, but with wider user permissions, allowing the attacker to have access to th...

Vulnerability Description

A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary directory, but with wider user permissions, allowing the attacker to have access to the contents that keycloak stores in this directory. The highest threat from this vulnerability is to data confidentiality and integrity.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
RedhatKeycloak< 13.0.0

Related Weaknesses (CWE)

CWE-377

References

FAQ

What is CVE-2021-20202?

CVE-2021-20202 is a vulnerability with a CVSS score of 7.3 (HIGH). A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary directory, but with wider user permissions, allowing the attacker to have access to th...

How severe is CVE-2021-20202?

CVE-2021-20202 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-20202?

Check the references section above for vendor advisories and patch information. Affected products include: Redhat Keycloak.