CVE-2021-3632CWE-287

CVE-2021-3632: vulnerability in keycloak

Published · Updated

Follow this CVE+ Monitor keycloak+ Monitor org.keycloak:keycloak-core

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow.
Affected products
n/a · keycloak