CVE-2018-14657
Fixed in a distro release EPSS 1%CVSS 5.4
A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.
Products: Red Hat keycloak
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.keycloak:keycloak-parent | 4.6.0.Final |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat red hat single sign on 7 | rh-sso7-keycloak | 0:3.4.14-1.Final_redhat_00001.1.jbcs.el6 |
| Red Hat red hat single sign on 7 | rh-sso7-keycloak | 0:3.4.14-1.Final_redhat_00001.1.jbcs.el7 |
| Red Hat red hat single sign on 7 | rh-sso7-keycloak-server | 0:3.4.14-1.Final_redhat_00001.1.jbcs.el6 |
| Red Hat red hat single sign on 7 | rh-sso7-keycloak-server | 0:3.4.14-1.Final_redhat_00001.1.jbcs.el7 |