CVE:CVE-2020-1714
CNNVD:CNNVD-202005-453
Red Hat Keycloak是美国红帽（Red Hat）公司的一套为现代应用和服务提供身份验证和管理功能的软件。
Red Hat Keycloak 11.0.0之前版本中的ObjectInputStream存在输入验证错误漏洞，该漏洞源于程序没有进行类型检查。远程攻击者可利用该漏洞执行代码。
solution:Upgrade redhat keycloak to a higher version than 11.0.0,and avoid the version (,11.0.0); Upgrade redhat decision_manager to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat jboss_fuse to a higher version than 7.0.0,and avoid the version 7.0.0; Upgrade redhat openshift_application_runtimes to a higher version than -; Upgrade redhat process_automation to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat single_sign-on to a higher version than 7.0,and avoid the version 7.0; Upgrade quarkus quarkus to a higher version than 1.4.2,and avoid the version (,1.4.2]