[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fURawAUm0S0Fmr7TukdTkjLYs6Mb8IryguIIY7hqbn0Y":3,"g5a-risk:CVE-2024-4629":234},{"success":4,"data":5,"meta":231},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":89,"references":90,"referencesCount":129,"weaknesses":130,"weaknessesCount":139,"isActivelyExploited":58,"cisaInfo":26,"otxData":26,"relatedBlogPosts":140,"seoMetadata":141,"configurations":166,"relatedVendorCves":229,"notableEvents":230},"CVE-2024-4629","What is CVE-2024-4629?","A vulnerability was found in Keycloak. This flaw allows attackers to bypass brute force protection by exploiting the timing of login attempts. By initiating multiple login requests simultaneously, attackers can exceed the configured limits for failed attempts before the system locks them out. This timing loophole enables attackers to make more guesses at passwords than intended, potentially compromising account security on affected systems.","A vulnerability was found in Keycloak. This flaw allows attackers to bypass brute force protection by exploiting the timing of login attempts. By initiating ...","2024-09-03T20:15:09.003","2026-06-17T08:02:17.673",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":35},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"secalert@redhat.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,2.5,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],[],0.00793,[36,36,36,36,36,36,36],"Medium",[40,45,48,52,54,59,62,65,69,72,76,79,82,84,87],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"redhat","keycloak","*","cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*",{"vendor":41,"product":46,"version":43,"criteria":47,"vulnerable":4},"build_of_keycloak","cpe:2.3:a:redhat:build_of_keycloak:*:*:*:*:*:*:*:*",{"vendor":41,"product":49,"version":50,"criteria":51,"vulnerable":4},"single_sign-on","-","cpe:2.3:a:redhat:single_sign-on:-:*:*:*:text-only:*:*:*",{"vendor":41,"product":49,"version":43,"criteria":53,"vulnerable":4},"cpe:2.3:a:redhat:single_sign-on:*:*:*:*:*:*:*:*",{"vendor":41,"product":55,"version":56,"criteria":57,"vulnerable":58},"enterprise_linux","7.0","cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",false,{"vendor":41,"product":55,"version":60,"criteria":61,"vulnerable":58},"8.0","cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",{"vendor":41,"product":55,"version":63,"criteria":64,"vulnerable":58},"9.0","cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",{"vendor":41,"product":66,"version":67,"criteria":68,"vulnerable":4},"openshift_container_platform","4.11","cpe:2.3:a:redhat:openshift_container_platform:4.11:*:*:*:*:*:*:*",{"vendor":41,"product":66,"version":70,"criteria":71,"vulnerable":4},"4.12","cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:*",{"vendor":41,"product":73,"version":74,"criteria":75,"vulnerable":4},"openshift_container_platform_for_linuxone","4.9","cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.9:*:*:*:*:*:*:*",{"vendor":41,"product":73,"version":77,"criteria":78,"vulnerable":4},"4.10","cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.10:*:*:*:*:*:*:*",{"vendor":41,"product":80,"version":74,"criteria":81,"vulnerable":4},"openshift_container_platform_for_power","cpe:2.3:a:redhat:openshift_container_platform_for_power:4.9:*:*:*:*:*:*:*",{"vendor":41,"product":80,"version":77,"criteria":83,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_for_power:4.10:*:*:*:*:*:*:*",{"vendor":41,"product":85,"version":74,"criteria":86,"vulnerable":4},"openshift_container_platform_ibm_z_systems","cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.9:*:*:*:*:*:*:*",{"vendor":41,"product":85,"version":77,"criteria":88,"vulnerable":4},"cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.10:*:*:*:*:*:*:*",15,[91,96,99,102,105,108,111,114,117,121,125],{"url":92,"source":93,"tags":94},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2024:6493","Red Hat",[95],"Vendor Advisory",{"url":97,"source":93,"tags":98},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2024:6494",[95],{"url":100,"source":93,"tags":101},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2024:6495",[95],{"url":103,"source":93,"tags":104},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2024:6497",[95],{"url":106,"source":93,"tags":107},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2024:6499",[95],{"url":109,"source":93,"tags":110},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2024:6500",[95],{"url":112,"source":93,"tags":113},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2024:6501",[95],{"url":115,"source":93,"tags":116},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2024-4629",[95],{"url":118,"source":93,"tags":119},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2276761",[120,95],"Issue Tracking",{"url":122,"source":123,"tags":124},"https:\u002F\u002Fgithub.com\u002Fhnsecurity\u002Fvulns\u002Fblob\u002Fmain\u002FHNS-2024-09-Keycloak.md","GitHub",[],{"url":126,"source":127,"tags":128},"https:\u002F\u002Fsecurity.humanativaspa.it\u002Fan-analysis-of-the-keycloak-authentication-system\u002F","Humanativaspa",[],11,[131],{"id":132,"name":133,"description":134,"extendedDescription":135,"status":136,"abstraction":137,"structure":138},"CWE-837","Improper Enforcement of a Single, Unique Action","The product requires that an actor should only be able to perform an action once, or to have only one unique action, but the product does not enforce or improperly enforces this restriction.","In various applications, a user is only expected to perform a certain action once, such as voting, requesting a refund, or making a purchase. When this restriction is not enforced, sometimes this can have security implications. For example, in a voting application, an attacker could attempt to \"stuff the ballot box\" by voting multiple times. If these votes are counted separately, then the attacker could directly affect who wins the vote. This could have significant business impact depending on the purpose of the product.","Incomplete","Base","Simple",1,[],{"title":142,"metaDescription":143,"keywords":144,"canonicalUrl":145,"structuredData":146},"What is CVE-2024-4629? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-4629, a medium severity cyber security vulnerability from 2024. A vulnerability was found in Keycloak. This flaw allows at...","CVE-2024-4629, CVE-2024-4629 vulnerability, CVE-2024-4629 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, redhat security, keycloak vulnerability, build_of_keycloak vulnerability, single_sign-on vulnerability, enterprise_linux vulnerability, openshift_container_platform vulnerability","\u002Fwhat-is\u002Fcve-2024-4629",{"@context":147,"@type":148,"headline":142,"description":143,"datePublished":10,"dateModified":11,"author":149,"publisher":153,"about":157,"mainEntityOfPage":161,"articleSection":164,"keywords":165},"https:\u002F\u002Fschema.org","TechArticle",{"@type":150,"name":151,"url":152},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":150,"name":151,"url":152,"logo":154},{"@type":155,"url":156},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":158,"name":6,"description":159,"additionalType":160},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":162,"@id":163},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-4629","Cybersecurity","CVE-2024-4629, CVE-2024-4629 vulnerability, CVE-2024-4629 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[167,175,183,189,206],{"Operator":26,"Negate":26,"Nodes":168},[169],{"Operator":170,"Negate":58,"CPEMatch":171},"OR",[172],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":173,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":174,"VersionEndIncluding":26},"EEB94F86-A977-493B-9F12-6991F84F955C","24.0.3",{"Operator":26,"Negate":26,"Nodes":176},[177],{"Operator":170,"Negate":58,"CPEMatch":178},[179],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":180,"VersionStartExcluding":26,"VersionStartIncluding":181,"VersionEndExcluding":182,"VersionEndIncluding":26},"395F9BD6-C79B-442A-AA00-F96CA978B910","22.0","22.012",{"Operator":26,"Negate":26,"Nodes":184},[185],{"Operator":170,"Negate":58,"CPEMatch":186},[187],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":188,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"341E6313-20D5-44CB-9719-B20585DC5AD6",{"Operator":190,"Negate":26,"Nodes":191},"AND",[192,198],{"Operator":170,"Negate":58,"CPEMatch":193},[194],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":195,"VersionStartExcluding":26,"VersionStartIncluding":196,"VersionEndExcluding":197,"VersionEndIncluding":26},"92BC930F-97E8-4FA9-80C5-3A8DB327990B","7.6","7.6.10",{"Operator":170,"Negate":58,"CPEMatch":199},[200,202,204],{"Vulnerable":58,"Criteria":57,"MatchCriteriaID":201,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"142AD0DD-4CF3-4D74-9442-459CE3347E3A",{"Vulnerable":58,"Criteria":61,"MatchCriteriaID":203,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F4CFF558-3C47-480D-A2F0-BABF26042943",{"Vulnerable":58,"Criteria":64,"MatchCriteriaID":205,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7F6FB57C-2BC7-487C-96DD-132683AEB35D",{"Operator":190,"Negate":26,"Nodes":207},[208,226],{"Operator":170,"Negate":58,"CPEMatch":209},[210,212,214,216,218,220,222,224],{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":211,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EA983F8C-3A06-450A-AEFF-9429DE9A3454",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":213,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"40449571-22F8-44FA-B57B-B43F71AB25E2",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":215,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B02036DD-4489-480B-B7D4-4EB08952377B",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":217,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C7E78C55-45B6-4E01-9773-D3468F8EA9C3",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"30E2CF79-2D56-48AB-952E-5DDAFE471073",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":221,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"54E24055-813B-4E6D-94B7-FAD5F78B8537",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":223,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CC262C4C-7B6A-4117-A50F-1FF69296DDD8",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":225,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E58526FB-522F-4AAC-B03C-9CAB443D0CFF",{"Operator":170,"Negate":58,"CPEMatch":227},[228],{"Vulnerable":58,"Criteria":61,"MatchCriteriaID":203,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},[],[],{"lastModified":11,"cacheTime":232,"version":233},1792254457350,"2.0",{"score":235,"band":236,"action":237,"scoredAt":238},31,"Low","Monitor","2026-10-16T07:03:42.888573+00:00"]