Description
A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confidentiality.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1698
Related Vulnerabilities
CVE-2020-17532 Vulnerability in maven package org.apache.servicecomb:foundation-config
CVE-2023-49656 Vulnerability in maven package org.jenkins-ci.plugins:matlab
CVE-2022-36095 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates
CVE-2017-16129 Vulnerability in npm package superagent
CVE-2022-36663 Vulnerability in maven package org.gluu:oxauth-common