Описание
A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Issue TrackingVendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Issue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:redhat:keycloak:4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:keycloak:4.3.0:*:*:*:*:*:*:*
Конфигурация 2
Одновременно
cpe:2.3:a:redhat:single_sign-on:7.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*
Конфигурация 3
Одновременно
cpe:2.3:a:redhat:single_sign-on:7.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*
Конфигурация 4
cpe:2.3:a:redhat:single_sign-on:-:*:*:*:text-only:*:*:*
EPSS
Процентиль: 58%
0.00365
Низкий
5.4 Medium
CVSS3
8.1 High
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-307
CWE-307
Связанные уязвимости
CVSS3: 5.4
redhat
около 7 лет назад
A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.
CVSS3: 8.1
debian
около 7 лет назад
A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabl ...
EPSS
Процентиль: 58%
0.00365
Низкий
5.4 Medium
CVSS3
8.1 High
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-307
CWE-307