CVE-2021-3513

🗓️ 22 Aug 2022 14:45:08Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 149 Views

Flaw in Keycloak allows brute force attack despite permanent lockout featur

Reporter	Title	Published	Views	Family All 26
ArchLinux	[ASA-202105-6] keycloak: multiple issues	19 May 202100:00	–	archlinux
Circl	CVE-2021-3513	28 Jan 202404:24	–	circl
CNNVD	Red Hat Keycloak 安全漏洞	26 Apr 202100:00	–	cnnvd
Cvelist	CVE-2021-3513	22 Aug 202214:45	–	cvelist
EUVD	EUVD-2022-6648	3 Oct 202520:07	–	euvd
Github Security Blog	Incorrect implementation of lockout feature in Keycloak	23 Aug 202200:00	–	github
NVD	CVE-2021-3513	22 Aug 202215:15	–	nvd
OSV	CVE-2021-3513	22 Aug 202215:15	–	osv
OSV	GHSA-XV7H-95R7-595J Incorrect implementation of lockout feature in Keycloak	23 Aug 202200:00	–	osv
OSV	RHSA-2021:3527 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.9 security update on RHEL 6	29 Sep 202418:12	–	osv

NVD

Vulners

Node

redhat keycloakRange<13.0.0

[
  {
    "product": "keycloak",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in keycloak v13.0.0."
      }
    ]
  }
]