7.0.0

DATE	CVE	VULNERABILITY TITLE	RISK
2019-12-04	CVE-2019-14909	Improper Authentication vulnerability in Redhat Keycloak 7.0.0/7.0.1 A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will be accepted. network low complexity redhat CWE-287	7.5
2019-10-15	CVE-2019-14832	Incorrect Authorization vulnerability in Redhat Keycloak A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured. network redhat CWE-863	6.0