Lucene search

K
osvGoogleOSV:CVE-2019-14910
HistoryDec 05, 2019 - 3:15 p.m.

CVE-2019-14910

2019-12-0515:15:11
Google
osv.dev
11

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

55.6%

A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (ldaps), in this case user authentication succeeds even if invalid password has entered.

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

55.6%