Read the docs
Red Hat Security Advisory

RHSA-2016:2945

Red Hat Single Sign-On security update

Released 2016-12-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

TI-2016-07071 CVE-2016-8609 · GHSA-95m6-mjh3-58gm

Session fixation in Red Hat keycloak

Priority LOW 39

It was found that the keycloak before 2.3.0 did not implement authentication flow correctly.

CVSS 3.0HIGH 8.1 Network No auth User interaction EPSS 0.01679 Published 2018-08-01 Fixed in 2.3.0 CWE-384