[{"CVE":"CVE-2017-15111","severity":"low","public_date":"2018-01-05T00:00:00Z","advisories":["RHSA-2019:2137"],"bugzilla":"1511623","bugzilla_description":"CVE-2017-15111 keycloak-httpd-client-install: unsafe /tmp log file in --log-file option in keycloak_cli.py","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":["keycloak-httpd-client-install-0:0.8-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15111.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","cvss3_score":"3.9"},{"CVE":"CVE-2017-15112","severity":"low","public_date":"2018-01-05T00:00:00Z","advisories":["RHSA-2019:2137"],"bugzilla":"1511626","bugzilla_description":"CVE-2017-15112 keycloak-httpd-client-install: unsafe use of -p/--admin-password on command line","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["keycloak-httpd-client-install-0:0.8-1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15112.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"}]