PT-2019-4632 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: Keycloak versions 7.x Description: A vulnerability was found in Keycloak when configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server, allowing user authentication to succeed even with an invalid...