{"vulnerability": "CVE-2020-2783", "sightings": [{"uuid": "cff74e81-2cec-40c8-873f-d6ae556d8e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27838", "type": "seen", "source": "https://t.me/arpsyndicate/4758", "content": "#ExploitObserverAlert\n\nCVE-2020-27838\n\nDESCRIPTION: Exploit Observer has 12 entries in 5 file formats related to CVE-2020-27838. A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.\n\nFIRST-EPSS: 0.088000000\nNVD-IS: 3.6\nNVD-ES: 2.8\nARPS-PRIORITY: 0.9055936", "creation_timestamp": "2024-04-23T18:25:40.000000Z"}, {"uuid": "a1b22be8-6a2b-465d-beaf-b8a2deca5558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27838", "type": "seen", "source": "https://t.me/arpsyndicate/3163", "content": "#ExploitObserverAlert\n\nCVE-2020-27838\n\nDESCRIPTION: Exploit Observer has 6 entries in 5 file formats related to CVE-2020-27838. A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.\n\nFIRST-EPSS: 0.081350000\nNVD-IS: 3.6\nNVD-ES: 2.8", "creation_timestamp": "2024-01-28T02:18:09.000000Z"}, {"uuid": "ec41457e-6599-4a78-b10d-0434244c19ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27838", "type": "seen", "source": "https://t.me/arpsyndicate/2913", "content": "#ExploitObserverAlert\n\nCVE-2020-27838\n\nDESCRIPTION: Exploit Observer has 5 entries in 3 file formats related to CVE-2020-27838. A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.\n\nFIRST-EPSS: 0.081350000\nNVD-IS: 3.6\nNVD-ES: 2.8", "creation_timestamp": "2024-01-19T09:03:04.000000Z"}, {"uuid": "0d07c774-611d-4730-acbf-5f2b676c039f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27838", "type": "seen", "source": "https://t.me/arpsyndicate/2942", "content": "#ExploitObserverAlert\n\nPD/http/cves/2020/CVE-2020-27838\n\nDESCRIPTION: Exploit Observer has 4 entries in 3 file formats related to PD/HTTP/CVES/2020/CVE-2020-27838. A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.", "creation_timestamp": "2024-01-19T17:10:10.000000Z"}, {"uuid": "7548f2f9-0648-4244-a603-f37d05c1e064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27836", "type": "seen", "source": "https://t.me/cibsecurity/48506", "content": "\u203c CVE-2020-27836 \u203c\n\nA flaw was found in cluster-ingress-operator. A change to how the router-default service allows only certain IP source ranges could allow an attacker to access resources that would otherwise be restricted to specified IP ranges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability..\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-22T18:26:48.000000Z"}, {"uuid": "bf49fe59-bc3c-462e-92db-b0486265b2c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27835", "type": "seen", "source": "https://t.me/cibsecurity/21765", "content": "\u203c CVE-2020-27835 \u203c\n\nA use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-07T20:40:49.000000Z"}, {"uuid": "b0f2683e-1d94-49d9-852f-bbecc15e6d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-27837", "type": "seen", "source": "https://t.me/cibsecurity/21369", "content": "\u203c CVE-2020-27837 \u203c\n\nA flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more difficult conditions to exploit.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-28T22:28:58.000000Z"}]}