Red Hat Security AdvisoryRHSA-2020:5528
Red Hat Single Sign-On 7.4.4 security update on RHEL 8
Released 2020-12-15 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Single Sign-On 7.4 for RHEL 8 rh-sso7-keycloak-9.0.10-1.redhat_00001.1.el8sso, rh-sso7-keycloak-server-9.0.10-1.redhat_00001.1.el8sso
Fixes 1 record
Priority LOW 20
A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using Account REST API.
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.00572 · Published 2021-05-28 · Fixed in 12.0.0 CWE-250
