Read the docs
Red Hat Security Advisory

RHSA-2022:1713

security update for rh-sso-7/sso75-openshift-rhel8 container image

Released 2022-05-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

TI-2022-01132 CVE-2022-1245 · GHSA-75p6-52g3-rqc8

Missing authorization in keycloak

Priority MEDIUM 45

A privilege escalation flaw was found in the token exchange feature of keycloak.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01448 Published 2022-07-07 Fixed in 18.0.0 CWE-862