Red Hat Security Advisory

RHSA-2024:6889

Red Hat build of Keycloak 24.0.8 Images Update

Released 2024-09-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Keycloak 24 rhbk/keycloak-operator-bundle, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator

TI-2024-08067 CVE-2024-8698 · GHSA-xgfv-xpx8-qhcr

LOW 38

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0203 Published 2024-09-19 Partial fix · 25.0.5, 22.0.13-1 +81 CWE-347

TI-2024-08248 CVE-2024-8883 · GHSA-w8gr-xwp4-r9f7

LOW 33

A misconfiguration flaw was found in Keycloak.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02112 Published 2024-09-19 Fixed in 22.0.12, 24.0.7 +87 CWE-601