Read the docs
TI-2020-01701 Aliases CVE-2020-1758GHSA-c597-f74m-jgc2

Improper certificate validation in Red Hat keycloak

Priority LOW 28CWE-297Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Spoofing
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 4 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-295.

Summary

A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle (MITM) attack.

Why it matters now

EPSS 0.00928 60th percentileScored 2026-11-07
Fix Partial org.keycloak:keycloak-parent (Maven): 10.0.0Red Hat: 4 advisoriesRed Hat: 4 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red Hatkeycloakkeycloak versions before 10.0.0—No fix listedCNA
—org.keycloak:keycloak-parent (Maven)before 10.0.010.0.0Patch availableGHSA-c597-f74m-jgc2
  • keycloak VendorRed Hat Affected keycloak versions before 10.0.0 Fixed in — No fix listed CNA
  • org.keycloak:keycloak-parent (Maven) Vendor— Affected before 10.0.0 Fixed in 10.0.0 Patch available GHSA-c597-f74m-jgc2

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*before 10.0.0VulnerableRed Hat
cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*10VulnerableRed Hat
  • cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:* Versions before 10.0.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:* Versions 10 Vulnerable ·Red Hat

Remediation

  • Fix · GHSA-c597-f74m-jgc2 org.keycloak:keycloak-parent (Maven) Fixed in 10.0.0 Advisory →

Red Hat 4 advisories

  • RHSA-2020:2112 Released 2020-05-12 · Red Hat rating Important
    Red Hat Single Sign-On 7.3.8 security update
    • Red Hat Single Sign On 7.3.8
  • RHSA-2020:2108 Released 2020-05-12 · Red Hat rating Important
    Red Hat Single Sign-On 7.3.8 security update on RHEL 8
    • Red Hat Single Sign-On 7.3 for RHEL 8 rh-sso7-keycloak-4.8.20-1.Final_redhat_00001.1.el8sso, rh-sso7-keycloak-server-4.8.20-1.Final_redhat_00001.1.el8sso
  • RHSA-2020:2106 Released 2020-05-12 · Red Hat rating Important
    Red Hat Single Sign-On 7.3.8 security update on RHEL 6
    • Red Hat Single Sign-On 7.3 for RHEL 6 Server rh-sso7-keycloak-4.8.20-1.Final_redhat_00001.1.el6sso, rh-sso7-keycloak-server-4.8.20-1.Final_redhat_00001.1.el6sso
Show 1 more Red Hat advisories
  • RHSA-2020:2107 Released 2020-05-12 · Red Hat rating Important
    Red Hat Single Sign-On 7.3.8 security update on RHEL 7
    • Red Hat Single Sign-On 7.3 for RHEL 7 Server rh-sso7-keycloak-4.8.20-1.Final_redhat_00001.1.el7sso, rh-sso7-keycloak-server-4.8.20-1.Final_redhat_00001.1.el7sso

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenStack Platform 10 (Newton)AffectedNo fix planned: Out of support scope
Red Hat Single Sign On 7.3.8Fixed RHSA-2020:2112
Red Hat Single Sign-On 7.3 for RHEL 6 ServerFixed RHSA-2020:2106
Red Hat Single Sign-On 7.3 for RHEL 7 ServerFixed RHSA-2020:2107
Red Hat Single Sign-On 7.3 for RHEL 8Fixed RHSA-2020:2108
Not affected: 3 products
  • Red Hat Fuse 7
  • Red Hat OpenShift Application Runtimes
  • Red Hat support for Spring Boot

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-1758
  2. 2026-10-03 Alias added: GHSA-c597-f74m-jgc2

References

Advisory 3

  • TI-2024-01049 Keycloak: path transversal in redirection validation CVSS 3.1HIGH 8.1
  • TI-2023-26623 The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6… CVSS 3.1MEDIUM 5.9
  • TI-2020-08665 Server-side request forgery in keycloak CVSS 3.1MEDIUM 5.3
  • TI-2022-03468 Path traversal in Red Hat Keycloak CVSS 3.1CRITICAL 9.1
  • TI-2021-03612 A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak. CVSS 3.1MEDIUM 6.1
  • TI-2022-03994 Cross-site scripting in keycloak CVSS 3.1CRITICAL 10.0
See all 97 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences