Launch Week Day 1: Announcing Security Design Review
CRITICAL 9.8 Maven

Predictable password in Keycloak

GHSA-6pmv-7pr9-cgrj · CVE-2020-1731

Published · Modified

Description

A flaw was found in all versions of the Keycloak operator, before version 8.0.2,(community only) where the operator generates a random admin password when installing Keycloak, however the password remains the same when deployed to the same OpenShift namespace.

Ready to move

Start Securing

Free, no credit card | First findings in minutes