CVE-2025-0604

A flaw was found in Keycloak. When an Active Directory user resets their password, the system updates it without performing an LDAP bind to validate the new credentials against AD. This vulnerability allows users whose AD accounts are expired or disabled to regain access in Keycloak, bypassing AD...

Citrix cloud - Failed to create AD accounts for an MCS Catalog with PowerShell SDK.

You may be unable to create a computer AD account with PowerShell SDK using a service account. It will fail with error: Command: $adAccounts.FailedAccounts Impersonate user logon failed, Win32 Error Code: 1385 Error Reason: InvalidParamtersForADOperation...

CVE-2009-4879: Improper Authentication

The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions...