Weak credential policy In keycloak-connect
Description
Incorrect implementation of lockout feature in Keycloak A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wrong error message displayed when wrong credentials are entered. The highest threat from this vulnerability is to confidentiality.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 npm | 13.0.0 | ||
 maven | 13.0.0 | ||
maven | 13.0.0 | ||
maven | 13.0.0 | ||
maven | - |
Aliases
1. 2. 3. 4. 5.
References
1. 2.