| Package | Affected versions | Patched versions |
|---|---|---|
| org.keycloak:keycloak-parent | ≥ 7.0.0, ≤ 7.0.1 | |
| keycloak | = 7.0.0= 7.0.1 |
A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will be accepted.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free