Maurizio Agazzini

A flaw in Keycloak allows attackers to bypass brute force protection by exploiting the timing of login attempts. By initiating multiple login requests simultaneously, attackers can exceed the configured limits for failed attempts before the system locks them out. This timing loophole enables attackers to make more guesses at passwords than intended, potentially compromising account security on affected systems.

A flaw was found in Keycloak, where certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This issue presents a significant security risk as it allows unauthorized users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. The vulnerability is actively exploited in the wild. Over 39,000 results are found on ZoomEye, and over 763,000 services are found on the affected platform yearly.

The issue allows serialized objects from untrusted sources to run, causing the consumption of resources, which may lead to a denial of service.

The issue allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object. This is related to the JMX servlet in the affected software.

The issue allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.

The issue allows local administrators to bypass intended self-protection rules and unlock the console window by closing registry handles. This is related to the McAfee VirusScan Console (mcconsol.exe) on Windows.

The issue allows local administrators to bypass intended self-protection rules and disable the antivirus engine by modifying registry keys.

The issue allows remote attackers to determine valid usernames via a timing attack when a user does not exist, due to the immediate sending of an error message with PAM support enabled. This can lead to a violation of confidentiality. The vulnerability can be exploited remotely.

The issue concerns multiple vulnerabilities in various SNMP packages, which can lead to the disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The SNMPv3 HMAC verification relies on the client to specify the HMAC length, making it easier for remote attackers to bypass SNMP authentication. The estimated number of potentially affected devices worldwide is not provided. There is no information about real-world incidents where this issue was exploited.