Red Hat Security Advisory

RHSA-2024:6500

Red Hat build of Keycloak 22.0.12 Images Update

Released 2024-09-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat build of Keycloak 22 rhbk/keycloak-operator-bundle, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator

TI-2024-04307 CVE-2024-4629 · GHSA-gc7q-jgjv-vjr2

LOW 36

A vulnerability was found in Keycloak.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00793 Published 2024-09-03 Fixed in 22.0.12-1, 22-17 +8 CWE-837

TI-2024-06802 CVE-2024-7341 · GHSA-5rxp-2rhr-qwqv

LOW 35

A session fixation issue was discovered in the SAML adapters provided by Keycloak.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00848 Published 2024-09-09 Fixed in 22.0.12, 24.0.7 +10 CWE-384

TI-2024-05530 CVE-2024-5967 · GHSA-c25h-c27q-5qpv

LOW 15

A vulnerability was found in Keycloak.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00649 Published 2024-06-18 Fixed in 22.0.12, 24.0.6 +8 CWE-276