jdennis/keycloak-httpd-client-install

Releases20

Frequency1 month 4 weeks

Last Release almost 7 years ago

Stars14

Python support for Keycloak

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2017-15111 ↗	Jan 20, 2018Saturday, 20 January 2018, 00:29	—	3.6 LOW
keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.
CVE-2017-15112 ↗	Jan 20, 2018Saturday, 20 January 2018, 00:29	—	2.1 LOW
keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users.