Keycloak Authentication Error

GHSA-fv4q-wm8c-wjg4 · CVE-2019-14909

Published May 24, 2022 · Modified Feb 16, 2024

Description

A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will be accepted.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2019-14909
WEB https://access.redhat.com/security/cve/cve-2019-14909
WEB https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14909
PACKAGE https://github.com/keycloak/keycloak

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes