CVE-2020-27826

MediumCVSS 4.2/10Last modified Jun 17, 2026

Description

A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using Account REST API. This flaw allows an attacker to change its own NameID attribute to impersonate the admin user for any particular application.

Metrics

CVSS 3.1 4.2/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-250

Affected software

Vendor	Product	Versions
n/a	keycloak	keycloak 12.0.0

References

https://bugzilla.redhat.com/show_bug.cgi?id=1905089Issue Tracking, Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1905089Issue Tracking, Vendor Advisory

Timeline

Published: May 28, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-278277.5A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to han CVE-2020-278287.8There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary CVE-2020-278295.5A heap based buffer overflow in coders/tiff.c may result in program crash and denial of service in ImageMagick before 7.0.10-45.CVE-2020-27835.3Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). Supported versions th CVE-2020-278305.5A vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it would dereference spk_ttyio_synth without check CVE-2020-278314.3A flaw was found in Red Hat Quay, where it does not properly protect the authorization token when authorizing email addresses for repository CVE-2020-278329.0A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notifica CVE-2020-278337.1A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially craf CVE-2020-278354.4A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open d CVE-2020-278369.8A flaw was found in cluster-ingress-operator. A change to how the router-default service allows only certain IP source ranges could allow an CVE-2020-278376.4A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the CVE-2020-278386.5A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients