high8.3
CVE-2019-14909
A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will be accept…
Impact
A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will be accepted.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Keycloak | Versions 7.0.0, 7.0.1 |