Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-14910

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-jf86-9434-f8c2

Keycloak Authentication Error A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (ldaps), in this case user authentication succeeds even if invalid password has entered.

gitlab/maven/org.keycloak/keycloak-parent/CVE-2019-14910

Improper Certificate Validation A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (ldaps), in this case user authentication succeeds even if invalid password has entered.

gitlab/npm/keycloak-connect/CVE-2019-14910

Improper Authentication A vulnerability was found in keycloak, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (ldaps), in this case user authentication succeeds even if invalid password has entered.