Vulnerability Details CVE-2019-14909
A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will be accepted.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 61.6%
CVSS Severity
CVSS v3 Score 9.3
CVSS v2 Score 7.5
References