CVE-2021-3632CWE-287

A flaw was found in Keycloak

published August 26, 2022

CVSS
—
EPSS
1%
Percentile
66.8
In the wild
Unconfirmed
What it is

A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01157 · 66.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-08-26T15:25Z
EPSS history
Timeline
  • 26 AUG 15:25Z
    A flaw was found in Keycloak
    cvelistv5