CVE-2018-14657: Red Hat Keycloak

High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days.

A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.

Affected products

• Red Hat Keycloak: version 4.2.1 only; version 4.3.0 only
• Red Hat Single Sign-On: version 7.2 only; affected versions not specified

Published 2018-11-13. Last modified 2026-06-17.