Red Hat Security Advisory

RHSA-2024:3568

Red Hat Single Sign-On 7.6.9 security update on RHEL 9

Released 2024-06-03 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Single Sign-On 7.6 for RHEL 9 rh-sso7-keycloak-18.0.14-1.redhat_00001.1.el9sso, rh-sso7-keycloak-server-18.0.14-1.redhat_00001.1.el9sso

TI-2024-04227 CVE-2024-4540 · GHSA-69fp-7c8p-crjr

MEDIUM 40

A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests (PAR).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00551 Published 2024-06-03 Fixed in 22.0.11-2, 22-15 +8 CWE-312