Red Hat Security Advisory

RHSA-2021:5219

Red Hat Single Sign-On security update on RHEL 8

Released 2021-12-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Single Sign-On 7.5 for RHEL 8 rh-sso7-keycloak-15.0.2-3.redhat_00002.1.el8sso, rh-sso7-keycloak-server-15.0.2-3.redhat_00002.1.el8sso

Fixes 1 record

TI-2021-03009 CVE-2021-4133 · GHSA-83x4-9cwr-5487

Incorrect authorization in Keycloak

MEDIUM 41

A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user regist…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01373 Published 2022-01-25 Fixed in 15.1.1 CWE-863