TI-2020-01659 CVE-2020-1714 · GHSA-m6mm-q862-j366
Improper input validation in Red Hat keycloak
Priority MEDIUM 43
A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks.
RHSA-2020:2814
RH-SSO 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 7
Released 2020-07-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 7.3 for BaseOS-8 eap7-keycloak-adapter-sso7_4-9.0.4-1.redhat_00001.1.el8eap, eap7-keycloak-saml-adapter-sso7_4-9.0.4-1.redhat_00001.1.el8eap
- Red Hat JBoss EAP 7.3 for RHEL 6 Server eap7-keycloak-adapter-sso7_4-9.0.4-1.redhat_00001.1.el6eap, eap7-keycloak-saml-adapter-sso7_4-9.0.4-1.redhat_00001.1.el6eap
- Red Hat JBoss EAP 7.3 for RHEL 7 Server eap7-keycloak-adapter-sso7_4-9.0.4-1.redhat_00001.1.el7eap, eap7-keycloak-saml-adapter-sso7_4-9.0.4-1.redhat_00001.1.el7eap