CVE-2018-14657

CVSS v3.1 8.1 (High)

CVSS v2.0 4.3 (Medium)

EPSS 0.24 % (62^th)

Affected Products 3

Advisories 1

A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.

Weaknesses

CWE-307: Improper Restriction of Excessive Authentication Attempts

CVE Status: PUBLISHED
CNA: Red Hat, Inc.
Published Date: 2018-11-13 19:29:00
(5 years ago)
Updated Date: 2023-02-02 17:16:17
(19 months ago)

Affected Products

Redhat

Configuration #1

AND

		CPE23
OR
	Redhat Keycloak 4.2.1	cpe:2.3:a:redhat:keycloak:4.2.1
OR
	Running on/with
	Redhat Keycloak 4.3.0	cpe:2.3:a:redhat:keycloak:4.3.0

Configuration #2

AND

		CPE23
OR
	Redhat Single Sign-on 7.2	cpe:2.3:a:redhat:single_sign-on:7.2
OR
	Running on/with
	Redhat Linux 7.0	cpe:2.3:o:redhat:linux:7.0

Configuration #3

AND

		CPE23
OR
	Redhat Single Sign-on 7.2	cpe:2.3:a:redhat:single_sign-on:7.2
OR
	Running on/with
	Redhat Linux 6.0	cpe:2.3:o:redhat:linux:6.0

Configuration #4

AND

		CPE23	From	Up To
OR
	Redhat Single Sign-on	cpe:2.3:a:redhat:single_sign-on:-:::*:text-only