Red Hat Security AdvisoryRHSA-2019:0856
Red Hat Single Sign-On 7.2.7 security update on RHEL 7
Released 2019-04-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Single Sign-On 7.2 for RHEL 7 Server rh-sso7-keycloak-3.4.17-1.Final_redhat_00001.1.jbcs.el7, rh-sso7-keycloak-server-3.4.17-1.Final_redhat_00001.1.jbcs.el7
Fixes 1 record
Priority LOW 20
Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC.
CVSS 3.0LOW 3.8· Network · High privileges · No interaction · EPSS 0.01005 · Published 2019-04-24 · Partial fix · 6.0.0 CWE-200
