[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBy9CcDFKjizxHMMcrLegysji1O3HbGNmTCDerrL3rAE":3,"g5a-risk:CVE-2020-27838":127},{"success":4,"data":5,"meta":125},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":28,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":53,"references":54,"referencesCount":61,"weaknesses":62,"weaknessesCount":61,"isActivelyExploited":71,"cisaInfo":28,"otxData":28,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":109,"notableEvents":110},"CVE-2020-27838","What is CVE-2020-27838?","A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.","A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secr...","2021-03-08T22:15:13.423","2021-03-15T14:32:39.003",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":31,"CVSSMetricV40":28},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,[32],{"Source":17,"Type":18,"CVSSData":33,"BaseSeverity":27,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":28,"ObtainAllPrivilege":28,"ObtainUserPrivilege":28,"ObtainOtherPrivilege":28,"UserInteractionRequired":4},{"Version":34,"VectorString":35,"AccessVector":21,"AccessComplexity":27,"Authentication":23,"ConfidentialityImpact":36,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":37,"BaseSeverity":28,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",4.3,8.6,2.9,0.17943,[40,40,40,40,40,40,40],"Medium",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"redhat","keycloak","*","cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":4},"single_sign-on","7.0","cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*",2,[55],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1906797","Red Hat",[59,60],"Issue Tracking","Vendor Advisory",1,[63],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2020-27838? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-27838, a medium severity cyber security vulnerability from 2021. A flaw was found in keycloak in versions prior to 13.0.0....","CVE-2020-27838, CVE-2020-27838 vulnerability, CVE-2020-27838 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, redhat security, keycloak vulnerability, single_sign-on vulnerability","\u002Fwhat-is\u002Fcve-2020-27838",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-27838","Cybersecurity","CVE-2020-27838, CVE-2020-27838 vulnerability, CVE-2020-27838 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99],{"Operator":28,"Negate":28,"Nodes":100},[101],{"Operator":102,"Negate":28,"CPEMatch":103},"OR",[104,107],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":105,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":106,"VersionEndIncluding":28},"6C59F338-CA05-4F1D-84DA-246111636A0E","13.0.0",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":108,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890",[],[111,118],{"id":112,"eventType":113,"eventTime":114,"details":115,"label":116,"color":117},"fb3df832-fa0d-4fd2-9f27-8b01632666fd","LOW_EPSS_DELTA","2025-11-19T04:06:17.711586+00:00","Daily EPSS score decreased by 0.107 on 2023-12-30","EPSS Score Decreased","green",{"id":119,"eventType":120,"eventTime":121,"details":122,"label":123,"color":124},"009aab05-cf67-4c90-89b1-b812f9070624","HIGH_EPSS_DELTA","2025-11-22T04:06:05.237701+00:00","Daily EPSS score increased by 0.107 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":126,"version":34},1792248194631,{"score":128,"band":42,"action":129,"scoredAt":130},48,"Plan remediation","2026-10-16T06:50:38.821968+00:00"]