Red Hat Security Advisory

RHSA-2017:1203

Red Hat Single Sign-On Node.js adapter security update

Released 2017-05-08 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2017-05120 CVE-2017-7474 · GHSA-mw35-24gh-f82w

MEDIUM 47

It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02542 Published 2017-05-12 Partial fix · 3.1.0 CWE-253