CVE-2021-3632

A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow.
Configurations

Configuration 1

cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*

Information

Published : 2022-08-26 04:15

Updated : 2022-11-23 04:05


NVD link : CVE-2021-3632

Mitre link : CVE-2021-3632

Products Affected
CWE