CVE-2019-14910

2019-12-05T15:15:00
ID CVE-2019-14910
Type cve
Reporter cve@mitre.org
Modified 2019-12-13T20:02:00

Description

A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (ldaps), in this case user authentication succeeds even if invalid password has entered.