CVE-2018-14657

A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.

Score

CVSS 3.1 8.1 High

Status

Modified - secalert@redhat.com

Published

2018-11-13

Last modified

2024-08-05

Weaknesses

CWE-307

Affected products

• Keycloak (Red Hat)
• Keycloak (Redhat)
• Single Sign-on (Redhat)

References

• https://access.redhat.com/errata/RHSA-2018:3592
• https://access.redhat.com/errata/RHSA-2018:3593
• https://access.redhat.com/errata/RHSA-2018:3595
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14657