A flaw was found in Keycloak in versions before 9.0.2. This flaw allows a malicious user that is currently logged in, to see the personal information of a previously logged out user in the account manager section.
CPE | Name | Operator | Version |
---|---|---|---|
keycloak | lt | 9.0.2 | |
single_sign-on | eq | 7.0 |