Red Hat Security Advisory

RHSA-2022:4932

Red Hat Fuse 7.10.2.P1 security update

Released 2022-06-07 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2021-05527 CVE-2021-22573 · GHSA-hw42-3568-wj87

LOW 39

The vulnerability is that IDToken verifier does not verify if token is properly signed.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.003 Published 2022-05-03 Partial fix · 1.33.2, 1.33.3 CWE-347