CVE-2021-3513CWE-522

A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled

published August 22, 2022

CVSS
—
EPSS
1%
Percentile
56.0
In the wild
Unconfirmed
What it is

A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wrong error message displayed when wrong credentials are entered. The highest threat from this vulnerability is to confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00795 · 56.0th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2022-08-22T14:45Z
EPSS history
Timeline
  • 22 AUG 14:45Z
    A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled
    cvelistv5