Red Hat Security Advisory

RHSA-2024:3572

Red Hat Single Sign-On 7.6.9 security update

Released 2024-06-03 · Red Hat rating Low · View on Red Hat →

Fixed in

TI-2024-03411 CVE-2024-3656 · GHSA-2cww-fgmg-4jqc

MEDIUM 43

A flaw was found in Keycloak.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.03323 Published 2024-10-09 Partial fix · 24.0.5 CWE-200

TI-2024-04227 CVE-2024-4540 · GHSA-69fp-7c8p-crjr

MEDIUM 40

A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests (PAR).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00551 Published 2024-06-03 Fixed in 22.0.11-2, 22-15 +8 CWE-312