Red Hat Security Advisory

RHSA-2021:5217

Red Hat Single Sign-On 7.5.0 security update

Released 2021-12-20 · Red Hat rating Important · View on Red Hat →

Fixed in

RHSSO 7.5 async for CVE-2021-4133

Fixes 1 record

TI-2021-03009 CVE-2021-4133 · GHSA-83x4-9cwr-5487

Incorrect authorization in Keycloak

MEDIUM 41

A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user regist…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01373 Published 2022-01-25 Fixed in 15.1.1 CWE-863