CVE-2021-3513

A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wrong error message displayed when wrong credentials are entered. The highest threat from this vulnerability is to confidentiality.

• CWE-522
• CWE-209

• https://access.redhat.com/security/cve/CVE-2021-3513Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1953439Issue Tracking, Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2021-3513Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1953439Issue Tracking, Vendor Advisory

Published

Aug 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-35120Improper handling between export and release functions on th…6.7
• CVE-2021-35121An array index is improperly used to lock and unlock a mutex…6.7
• CVE-2021-35122Non-secure region can try modifying RG permissions of IO spa…7.8
• CVE-2021-35123Buffer copy in GATT multi notification due to improper lengt…8.8
• CVE-2021-35126Memory corruption in DSP service due to improper validation …7.8
• CVE-2021-35129Memory corruption in BT controller due to improper length ch…7.8
• CVE-2021-35130Memory corruption in graphics support layer due to use after…7.8
• CVE-2021-35132Out of bound write in DSP service due to improper bound chec…7.8
• CVE-2021-35133Use after free in the synx driver issue while performing oth…6.7
• CVE-2021-35134Due to insufficient validation of ELF headers, an Incorrect …8.4
• CVE-2021-35135A null pointer dereference may potentially occur during RSA …5.5
• CVE-2021-3514When using a sync_repl client in 389-ds-base, an authenticat…6.5