Red Hat Security Advisory

RHSA-2019:2483

Red Hat Single Sign-On 7.3.3 security update

Released 2019-08-13 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2019-07520 CVE-2019-10199 · GHSA-p5xp-6vpf-jwvh

LOW 39

It was found that Keycloak's account console, up to 6.0.1, did not perform adequate header checks in some requests.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00495 Published 2019-08-14 Partial fix · 7.0.0 CWE-352

TI-2019-07522 CVE-2019-10201 · GHSA-4fgq-gq9g-3rw7

LOW 36

It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00714 Published 2019-08-14 Partial fix · 7.0.0 CWE-592