Red Hat Security Advisory

RHSA-2024:6880

Red Hat Single Sign-On 7.6.11 security update on RHEL 9

Released 2024-09-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Single Sign-On 7.6 for RHEL 9 rh-sso7-keycloak-18.0.18-1.redhat_00001.1.el9sso, rh-sso7-keycloak-server-18.0.18-1.redhat_00001.1.el9sso

TI-2024-08067 CVE-2024-8698 · GHSA-xgfv-xpx8-qhcr

LOW 38

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0203 Published 2024-09-19 Partial fix · 25.0.5, 22.0.13-1 +81 CWE-347

TI-2024-08248 CVE-2024-8883 · GHSA-w8gr-xwp4-r9f7

LOW 33

A misconfiguration flaw was found in Keycloak.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02112 Published 2024-09-19 Fixed in 22.0.12, 24.0.7 +87 CWE-601