Red Hat Security Advisory

RHSA-2024:10175

Red Hat build of Keycloak 24.0.9 Images Update

Released 2024-11-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Keycloak 24 rhbk/keycloak-operator-bundle, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator

TI-2024-09516 CVE-2024-10270 · GHSA-wq8x-cg39-8mrr

LOW 31

A vulnerability was found in the Keycloak-services package.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01245 Published 2024-11-25 Partial fix · 24.0.9, 26.0.6 +5 CWE-1333

TI-2024-09679 CVE-2024-10451 · GHSA-v7gv-xpgf-6395

LOW 28

A flaw was found in Keycloak.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00925 Published 2024-11-25 Partial fix · 24.0.9-1, 24-18 +5 CWE-798

TI-2024-08968 CVE-2024-9666 · GHSA-jgwc-jh89-rpgq

LOW 22

A vulnerability was found in the Keycloak Server.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00403 Published 2024-11-25 Partial fix · 24.0.9, 26.0.6 +5 CWE-444

TI-2024-09718 CVE-2024-10492 · GHSA-5545-r4hg-rj4m

LOW 15

A vulnerability was found in Keycloak.

CVSS 3.0LOW 2.7 Network High privileges No interaction EPSS 0.00712 Published 2024-11-25 Partial fix · 26.0.6, 24.0.9-1 +4 CWE-73