Red Hat Security Advisory

RHSA-2021:0969

Red Hat Single Sign-On 7.4.6 security update on RHEL 8

Released 2021-03-23 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Single Sign-On 7.4 for RHEL 8 rh-sso7-keycloak-9.0.12-1.redhat_00001.1.el8sso, rh-sso7-keycloak-server-9.0.12-1.redhat_00001.1.el8sso

Fixes 2 records

TI-2020-06196 CVE-2020-7676 · GHSA-mhp6-pxh8-r675

Cross-site scripting in angular.js

LOW 28

angular.js prior to 1.8.0 allows cross site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01932 Published 2020-06-08 Partial fix · 1.8.0 CWE-79

TI-2020-11173 CVE-2020-14302 · GHSA-74gp-x82w-5v28

Authentication bypass by capture-replay in keycloak

LOW 24

A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redirects to a Keycloak endpoint that accepts multiple invocations with the use of the same "state" paramet…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01005 Published 2020-12-15 Fixed CWE-294