CVE-2021-4133CWE-863

A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user…

published January 25, 2022

CVSS
—
EPSS
1%
Percentile
71.8
In the wild
Unconfirmed
What it is

A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user registration is disabled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01373 · 71.8th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2022-01-25T19:11Z
EPSS history
Timeline
  • 25 JAN 19:11Z
    A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user…
    cvelistv5