CVE-2021-3632 log
| Source |
|
| Severity | High |
| Remote | Yes |
| Type | Authentication bypass |
| Description | A security issue was found in keycloak where it possible for anyone to register a new security device/key when there is no device already registered for any user using WebAuthn password-less login flow. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1332 | keycloak | 15.0.2-1 | 16.0.0-1 | High | Fixed |