Executive brief
Keycloak allows anyone to register new security device or key for any user by using WebAuthn password-less login flow
Affected products
- Maven org.keycloak:keycloak-core
Junglewise Threat Intelligence
CVE-2021-3632: Keycloak allows anyone to register new security device or key for any user by using WebAuthn password-less login flow
CVE-2021-3632 · Severity: low · CVSS 3.1 · Published 2022-08-27
Technologies: org.keycloak:keycloak-core (Maven). Vendors: Maven.