Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 1

• Medium 6.5
  CVE-2024-4629

  Keycloak: potential bypass of brute force protection

  A vulnerability was found in Keycloak. This flaw allows attackers to bypass brute force protection by exploiting the timing of login attempts. By initiating multiple login requests simultaneously, attackers can exceed the configured limits for failed attempts…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform 8 Red Hat Build of Keycloak Maven
  Sep 3, 2024

Revision history

1. 2024-12-17 #3

   Neue Updates von HITACHI aufgenommen

2. 2024-09-09 #2

   Neue Updates von Red Hat aufgenommen

3. 2024-09-03 #1

   Initiale Fassung

References

• GitHub Advisory Database vom 2024-09-03
  https://github.com/advisories/GHSA-8wm9-24qg-m5qj
• Nist Vulnerability Database vom 2024-09-03
  https://nvd.nist.gov/vuln/detail/CVE-2024-4629
• Red Hat Security Advisory RHSA-2024:6493 vom 2024-09-09
  https://access.redhat.com/errata/RHSA-2024:6493
• Red Hat Security Advisory RHSA-2024:6501 vom 2024-09-09
  https://access.redhat.com/errata/RHSA-2024:6501
• Red Hat Security Advisory RHSA-2024:6500 vom 2024-09-09
  https://access.redhat.com/errata/RHSA-2024:6500
• Red Hat Security Advisory RHSA-2024:6499 vom 2024-09-09
  https://access.redhat.com/errata/RHSA-2024:6499
• Red Hat Security Advisory RHSA-2024:6497 vom 2024-09-09
  https://access.redhat.com/errata/RHSA-2024:6497
• Red Hat Security Advisory RHSA-2024:6495 vom 2024-09-09
  https://access.redhat.com/errata/RHSA-2024:6495
• Red Hat Security Advisory RHSA-2024:6494 vom 2024-09-09
  https://access.redhat.com/errata/RHSA-2024:6494
• Hitachi Vulnerability Information HITACHI-SEC-2024-152 vom 2024-12-17
  https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-152/index.html