Lucene search
Veracode Vulnerability DatabaseVERACODE:47508HistoryJun 13, 2024 - 5:58 a.m.
Denial Of Service Via Account Lockout
2024-06-1305:58:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
denial of service
account lockout
keycloak services
improper handling
email addresses
attackers
incorrect passwords
7 High
AI Score
Confidence
High
org.keycloak, keycloak-services is vulnerable to Denial of Service via account lockout. The vulnerability is due to improper handling of usernames formatted as email addresses, which allows attackers to lock out legitimate users by repeatedly using incorrect passwords.
7 High
AI Score
Confidence
High