Vulnerabilities > CVE-2021-3754 - Unspecified vulnerability in Redhat Keycloak and Single Sign-On
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
LOW Summary
A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any existing user. This may cause trouble in getting password recovery email in case the user forgets the password.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |