CVE-2021-3513

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wrong error message displayed when wrong credentials are entered. The highest threat from this vulnerability is to confidentiality.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-522CWE-209

Affected software

No affected versions have been published.

Timeline

Published
Aug 22, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-351307.8Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon IndustriCVE-2021-351327.8Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon CoCVE-2021-351336.7Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon ConnCVE-2021-351348.4Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in SnaCVE-2021-351355.5A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnapCVE-2021-35146.5When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted queryCVE-2021-35156.7A shell injection flaw was found in pglogical in versions before 2.3.4 and before 3.6.26. An attacker with CREATEDB privileges on a PostgreSCVE-2021-35167.8There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint cCVE-2021-35178.6There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted fCVE-2021-35188.8There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linkCVE-2021-35196.8A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password AtCVE-2021-351937.5Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers' i
CVE-2021-3513: High severity, CVSS 7.5 | Vulnix