CVE-2020-1698

A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.

• CWE-200
• CWE-532

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1698Issue Tracking, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1698Issue Tracking, Vendor Advisory

Published

May 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-16974<p>An elevation of privilege vulnerability exists when the W…7.8
• CVE-2020-16975<p>An elevation of privilege vulnerability exists when the W…7.8
• CVE-2020-16976<p>An elevation of privilege vulnerability exists when the W…7.8
• CVE-2020-16977<p>A remote code execution vulnerability exists in Visual St…7
• CVE-2020-16978<p>A cross site scripting vulnerability exists when Microsof…5.4
• CVE-2020-16979Microsoft SharePoint Information Disclosure Vulnerability5.3
• CVE-2020-16980<p>An elevation of privilege vulnerability exists when the W…7.8
• CVE-2020-16981Azure Sphere Elevation of Privilege Vulnerability6.1
• CVE-2020-16982Azure Sphere Unsigned Code Execution Vulnerability6.1
• CVE-2020-16983Azure Sphere Tampering Vulnerability5.7
• CVE-2020-16984Azure Sphere Unsigned Code Execution Vulnerability7.3
• CVE-2020-16985Azure Sphere Information Disclosure Vulnerability6.2