Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-2232

Keycloak: ldap injection on username input

Description

A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Single Sign-On 7

Default version status: unaffected

Red Hat Red Hat Single Sign-On 7

Default version status: unaffected

Red Hat Red Hat Single Sign-On 7

Default version status: unaffected

Red Hat Red Hat Single Sign-On 7

Default version status: affected

References