Keycloak Improper Bruteforce Detection
High severity
GitHub Reviewed
Published
May 13, 2022
to the GitHub Advisory Database
•
Updated Oct 6, 2023
Package
Affected versions
< 4.6.0.Final
Patched versions
4.6.0.Final
Description
Published by the National Vulnerability Database
Nov 13, 2018
Published to the GitHub Advisory Database
May 13, 2022
Reviewed
Jul 20, 2023
Last updated
Oct 6, 2023
A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.
References