Red Hat Security Advisory

RHSA-2024:6495

Red Hat Single Sign-On 7.6.10 security update on RHEL 9

Released 2024-09-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Single Sign-On 7.6 for RHEL 9 rh-sso7-keycloak-18.0.16-1.redhat_00001.1.el9sso, rh-sso7-keycloak-server-18.0.16-1.redhat_00001.1.el9sso

TI-2024-04307 CVE-2024-4629 · GHSA-gc7q-jgjv-vjr2

LOW 36

A vulnerability was found in Keycloak.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00793 Published 2024-09-03 Fixed in 22.0.12-1, 22-17 +8 CWE-837

TI-2024-06802 CVE-2024-7341 · GHSA-5rxp-2rhr-qwqv

LOW 35

A session fixation issue was discovered in the SAML adapters provided by Keycloak.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00848 Published 2024-09-09 Fixed in 22.0.12, 24.0.7 +10 CWE-384

TI-2024-05530 CVE-2024-5967 · GHSA-c25h-c27q-5qpv

LOW 15

A vulnerability was found in Keycloak.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00649 Published 2024-06-18 Fixed in 22.0.12, 24.0.6 +8 CWE-276