Read the docs
Red Hat Security Advisory

RHSA-2020:5625

Red Hat Single Sign-On 7.4.0 security update

Released 2020-12-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 8 records

TI-2020-08984 CVE-2020-11112 · GHSA-58pp-9c76-5625

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between…

Priority MEDIUM 46

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03643 Published 2020-03-31 Partial fix · 2.9.10.4 CWE-502
TI-2020-08983 CVE-2020-11111 · GHSA-v3xw-c963-f5hc

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between…

Priority MEDIUM 46

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms)…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03606 Published 2020-03-31 Partial fix · 2.9.10.4 CWE-502
TI-2020-01671 CVE-2020-1727 · GHSA-pw23-237p-qf6r

Improper input validation in [UNKNOWN] keycloak

Priority LOW 30

A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00801 Published 2020-06-22 Partial fix · 9.0.2 CWE-20
TI-2020-01645 CVE-2020-1698 · GHSA-qgmm-f2qw-r95f

Information disclosure in Red Hat keycloak

Priority LOW 25

A flaw was found in keycloak in versions before 9.0.0.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00371 Published 2020-05-11 Partial fix · 9.0.0 CWE-200