Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak
Priority LOW 38CWE-347Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · Low · Low
- Fix status
- Partial Red Hat: 11 fixed, 2 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-347.
Summary
A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0203 81st percentileScored 2026-11-07
Fix Partial keycloak: 25.0.5org.keycloak:keycloak-saml-core (Maven): 22.0.13, 24.0.8, 25.0.6Red Hat: 12 advisoriesRed Hat: 11 fixed, 2 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | keycloak | before 25.0.5 | 25.0.5 | Patch available | CNA |
| Red Hat | Red Hat Build of Keycloak | — | — | Not affected | CNA |
| Red Hat | Red Hat Build of Keycloak | — | — | Not affected | CNA |
| Red Hat | Red Hat build of Keycloak 22 | — | 22.0.13-1 | Patch available | CNA |
| Red Hat | Red Hat build of Keycloak 22 | — | 22-18 | Patch available | CNA |
| Red Hat | Red Hat build of Keycloak 22 | — | 22-21 | Patch available | CNA |
| Red Hat | Red Hat build of Keycloak 24 | — | 24.0.8-1 | Patch available | CNA |
| Red Hat | Red Hat build of Keycloak 24 | — | 24-17 | Patch available | CNA |
| Red Hat | Red Hat build of Keycloak 24 | — | 24-17 | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 2.33.0-1.redhat_00015.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 1:2.0.0-2.redhat_00005.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 1.8.0-2.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 2.2.0-2.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 1.16.1-2.redhat_00007.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 3.2.2-28.redhat_2.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 2.15.1-1.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 3.14.0-2.redhat_00006.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 4.0.5-1.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 1:2.0.0-2.redhat_00005.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 2.0.1-1.redhat_00002.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 0.1.0-2.redhat_00010.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 1.12.284-2.redhat_00002.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 1.2.5-2.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 800.4.0-1.GA_redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 2.1.0-4.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 6.2.31-1.Final_redhat_00002.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 8.0.1-3.Final_redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 0.8.1-2.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 1.1.3-1.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 3.0.1-1.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 1.1.3-1.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 3.5.3-1.Final_redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 4.0.2-1.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 5.3.10-1.Final_redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 2.22.1-1.redhat_00002.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 6.0.3-1.Final_redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 9.37.3-1.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 9.6.0-1.redhat_00002.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 2.3.0-1.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 2.0.1-3.Final_redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 3.0.1-2.Final_redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 3.0.4-1.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 8.0.0-6.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 2.0.16-1.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 2.2.0-1.redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | — | 8.0.4-2.GA_redhat_00005.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 2.33.0-1.redhat_00015.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 1:2.0.0-2.redhat_00005.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 1.8.0-2.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 2.2.0-2.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 1.16.1-2.redhat_00007.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 3.2.2-28.redhat_2.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 2.15.1-1.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 3.14.0-2.redhat_00006.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 4.0.5-1.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 1:2.0.0-2.redhat_00005.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 2.0.1-1.redhat_00002.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 0.1.0-2.redhat_00010.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 1.12.284-2.redhat_00002.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 1.2.5-2.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 800.4.0-1.GA_redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 2.1.0-4.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 6.2.31-1.Final_redhat_00002.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 8.0.1-3.Final_redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 0.8.1-2.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 1.1.3-1.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 3.0.1-1.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 1.1.3-1.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 3.5.3-1.Final_redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 4.0.2-1.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 5.3.10-1.Final_redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 2.22.1-1.redhat_00002.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 6.0.3-1.Final_redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 9.37.3-1.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 9.6.0-1.redhat_00002.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 2.3.0-1.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 2.0.1-3.Final_redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 3.0.1-2.Final_redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 3.0.4-1.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 8.0.0-6.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 2.0.16-1.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 2.2.0-1.redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | — | 8.0.4-2.GA_redhat_00005.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat Single Sign-On 7 | — | — | Not affected | CNA |
| Red Hat | Red Hat Single Sign-On 7.6 for RHEL 7 | — | 18.0.18-1.redhat_00001.1.el7sso | Patch available | CNA |
| Red Hat | Red Hat Single Sign-On 7.6 for RHEL 8 | — | 18.0.18-1.redhat_00001.1.el8sso | Patch available | CNA |
| Red Hat | Red Hat Single Sign-On 7.6 for RHEL 9 | — | 18.0.18-1.redhat_00001.1.el9sso | Patch available | CNA |
| Red Hat | RHEL-8 based Middleware Containers | — | 7.6-54 | Patch available | CNA |
| Red Hat | Red Hat Build of Keycloak | — | — | No fix listed | CNA |
| Red Hat | Red Hat Single Sign-On 7 | — | — | No fix listed | CNA |
| — | org.keycloak:keycloak-saml-core (Maven) | before 22.0.13 | 22.0.13 | Patch available | GHSA-xgfv-xpx8-qhcr |
| — | org.keycloak:keycloak-saml-core (Maven) | 23.0.0 to before 24.0.8 | 24.0.8 | Patch available | GHSA-xgfv-xpx8-qhcr |
| — | org.keycloak:keycloak-saml-core (Maven) | 25.0.0 to before 25.0.6 | 25.0.6 | Patch available | GHSA-xgfv-xpx8-qhcr |
- keycloak Vendor— Affected before 25.0.5 Fixed in 25.0.5 Patch available CNA
- Red Hat Build of Keycloak VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Build of Keycloak VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat build of Keycloak 22 VendorRed Hat Affected — Fixed in 22.0.13-1 Patch available CNA
- Red Hat build of Keycloak 22 VendorRed Hat Affected — Fixed in 22-18 Patch available CNA
- Red Hat build of Keycloak 22 VendorRed Hat Affected — Fixed in 22-21 Patch available CNA
- Red Hat build of Keycloak 24 VendorRed Hat Affected — Fixed in 24.0.8-1 Patch available CNA
- Red Hat build of Keycloak 24 VendorRed Hat Affected — Fixed in 24-17 Patch available CNA
- Red Hat build of Keycloak 24 VendorRed Hat Affected — Fixed in 24-17 Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat JBoss Enterprise Application Platform 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 2.33.0-1.redhat_00015.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 1:2.0.0-2.redhat_00005.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 1.8.0-2.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 2.2.0-2.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 1.16.1-2.redhat_00007.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 3.2.2-28.redhat_2.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 2.15.1-1.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 3.14.0-2.redhat_00006.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 4.0.5-1.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 1:2.0.0-2.redhat_00005.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 2.0.1-1.redhat_00002.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 0.1.0-2.redhat_00010.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 1.12.284-2.redhat_00002.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 1.2.5-2.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 800.4.0-1.GA_redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 2.1.0-4.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 6.2.31-1.Final_redhat_00002.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 8.0.1-3.Final_redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 0.8.1-2.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 1.1.3-1.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 3.0.1-1.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 1.1.3-1.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 3.5.3-1.Final_redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 4.0.2-1.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 5.3.10-1.Final_redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 2.22.1-1.redhat_00002.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 6.0.3-1.Final_redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 9.37.3-1.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 9.6.0-1.redhat_00002.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 2.3.0-1.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 2.0.1-3.Final_redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 3.0.1-2.Final_redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 3.0.4-1.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 8.0.0-6.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 2.0.16-1.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 2.2.0-1.redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 VendorRed Hat Affected — Fixed in 8.0.4-2.GA_redhat_00005.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 2.33.0-1.redhat_00015.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.0.0-2.redhat_00005.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 1.8.0-2.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 2.2.0-2.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 1.16.1-2.redhat_00007.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 3.2.2-28.redhat_2.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 2.15.1-1.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 3.14.0-2.redhat_00006.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 4.0.5-1.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 1:2.0.0-2.redhat_00005.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 2.0.1-1.redhat_00002.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 0.1.0-2.redhat_00010.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 1.12.284-2.redhat_00002.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 1.2.5-2.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 800.4.0-1.GA_redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 2.1.0-4.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 6.2.31-1.Final_redhat_00002.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 8.0.1-3.Final_redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 0.8.1-2.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 1.1.3-1.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 3.0.1-1.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 1.1.3-1.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 3.5.3-1.Final_redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 4.0.2-1.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 5.3.10-1.Final_redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 2.22.1-1.redhat_00002.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 6.0.3-1.Final_redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 9.37.3-1.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 9.6.0-1.redhat_00002.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 2.3.0-1.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 2.0.1-3.Final_redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 3.0.1-2.Final_redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 3.0.4-1.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 8.0.0-6.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 2.0.16-1.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 2.2.0-1.redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 VendorRed Hat Affected — Fixed in 8.0.4-2.GA_redhat_00005.1.el9eap Patch available CNA
- Red Hat Single Sign-On 7 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Single Sign-On 7.6 for RHEL 7 VendorRed Hat Affected — Fixed in 18.0.18-1.redhat_00001.1.el7sso Patch available CNA
- Red Hat Single Sign-On 7.6 for RHEL 8 VendorRed Hat Affected — Fixed in 18.0.18-1.redhat_00001.1.el8sso Patch available CNA
- Red Hat Single Sign-On 7.6 for RHEL 9 VendorRed Hat Affected — Fixed in 18.0.18-1.redhat_00001.1.el9sso Patch available CNA
- RHEL-8 based Middleware Containers VendorRed Hat Affected — Fixed in 7.6-54 Patch available CNA
- Red Hat Build of Keycloak VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Single Sign-On 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- org.keycloak:keycloak-saml-core (Maven) Vendor— Affected before 22.0.13 Fixed in 22.0.13 Patch available GHSA-xgfv-xpx8-qhcr
- org.keycloak:keycloak-saml-core (Maven) Vendor— Affected 23.0.0 to before 24.0.8 Fixed in 24.0.8 Patch available GHSA-xgfv-xpx8-qhcr
- org.keycloak:keycloak-saml-core (Maven) Vendor— Affected 25.0.0 to before 25.0.6 Fixed in 25.0.6 Patch available GHSA-xgfv-xpx8-qhcr
CPE names CNA · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:build_keycloak:22 | 22 | — | Red Hat |
| cpe:/a:redhat:build_keycloak:24 | 24 | — | Red Hat |
| cpe:/a:redhat:build_keycloak:22::el9 | 22 | — | Red Hat |
| cpe:/a:redhat:build_keycloak:24::el9 | 24 | — | Red Hat |
| cpe:/a:redhat:jboss_enterprise_application_platform:8.0 | 8.0 | — | Red Hat |
| cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8 | 8.0 | — | Red Hat |
| cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9 | 8.0 | — | Red Hat |
| cpe:/a:redhat:red_hat_single_sign_on:7.6 | 7.6 | — | Red Hat |
| cpe:/a:redhat:red_hat_single_sign_on:7.6::el7 | 7.6 | — | Red Hat |
| cpe:/a:redhat:red_hat_single_sign_on:7.6::el8 | 7.6 | — | Red Hat |
- cpe:/a:redhat:build_keycloak:22 Versions 22 — ·Red Hat
- cpe:/a:redhat:build_keycloak:24 Versions 24 — ·Red Hat
- cpe:/a:redhat:build_keycloak:22::el9 Versions 22 — ·Red Hat
- cpe:/a:redhat:build_keycloak:24::el9 Versions 24 — ·Red Hat
- cpe:/a:redhat:jboss_enterprise_application_platform:8.0 Versions 8.0 — ·Red Hat
- cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8 Versions 8.0 — ·Red Hat
- cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9 Versions 8.0 — ·Red Hat
- cpe:/a:redhat:red_hat_single_sign_on:7.6 Versions 7.6 — ·Red Hat
- cpe:/a:redhat:red_hat_single_sign_on:7.6::el7 Versions 7.6 — ·Red Hat
- cpe:/a:redhat:red_hat_single_sign_on:7.6::el8 Versions 7.6 — ·Red Hat
Remediation
- Fix · CNA keycloak Fixed in 25.0.5
- Fix · GHSA-xgfv-xpx8-qhcr org.keycloak:keycloak-saml-core (Maven) Fixed in 22.0.13 Advisory →
- Fix · GHSA-xgfv-xpx8-qhcr org.keycloak:keycloak-saml-core (Maven) Fixed in 24.0.8 Advisory →
- Fix · GHSA-xgfv-xpx8-qhcr org.keycloak:keycloak-saml-core (Maven) Fixed in 25.0.6 Advisory →
Red Hat 12 advisories
- RHSA-2024:8826 Released 2024-11-04 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 8.0.4 Security update
- Red Hat JBoss Enterprise Application Platform 8
- RHSA-2024:8823 Released 2024-11-04 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 8.0.4 Security update
- Red Hat JBoss EAP 8.0 for RHEL 8 eap8-activemq-artemis-2.33.0-1.redhat_00015.1.el8eap, eap8-activemq-artemis-cli-2.33.0-1.redhat_00015.1.el8eap, eap8-activemq-artemis-commons-2.33.0-1.redhat_00015.1.el8eap +47
- RHSA-2024:8824 Released 2024-11-04 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 8.0.4 Security update
- Red Hat JBoss EAP 8.0 for RHEL 9 eap8-activemq-artemis-2.33.0-1.redhat_00015.1.el9eap, eap8-activemq-artemis-cli-2.33.0-1.redhat_00015.1.el9eap, eap8-activemq-artemis-commons-2.33.0-1.redhat_00015.1.el9eap +47
Show 9 more Red Hat advisories
- RHSA-2024:6889 Released 2024-09-19 · Red Hat rating ImportantRed Hat build of Keycloak 24.0.8 Images Update
- Red Hat build of Keycloak 24 rhbk/keycloak-operator-bundle, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator
- RHSA-2024:6890 Released 2024-09-19 · Red Hat rating ImportantRed Hat build of Keycloak 24.0.8 Update
- Red Hat Build of Keycloak
- RHSA-2024:6887 Released 2024-09-19 · Red Hat rating ImportantRed Hat build of Keycloak 22.0.13 Images Update
- Red Hat build of Keycloak 22 rhbk/keycloak-operator-bundle, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator
- RHSA-2024:6888 Released 2024-09-19 · Red Hat rating ImportantRed Hat build of Keycloak 22.0.13 Update
- Red Hat Build of Keycloak
- RHSA-2024:6886 Released 2024-09-19 · Red Hat rating ImportantRed Hat Single Sign-On 7.6.11 security update
- Red Hat Single Sign-On 7
- RHSA-2024:6882 Released 2024-09-19 · Red Hat rating ImportantRed Hat Single Sign-On 7.6.11 for OpenShift image enhancement update
- Middleware Containers for OpenShift rh-sso-7/sso76-openshift-rhel8
- RHSA-2024:6880 Released 2024-09-19 · Red Hat rating ImportantRed Hat Single Sign-On 7.6.11 security update on RHEL 9
- Red Hat Single Sign-On 7.6 for RHEL 9 rh-sso7-keycloak-18.0.18-1.redhat_00001.1.el9sso, rh-sso7-keycloak-server-18.0.18-1.redhat_00001.1.el9sso
- RHSA-2024:6879 Released 2024-09-19 · Red Hat rating ImportantRed Hat Single Sign-On 7.6.11 security update on RHEL 8
- Red Hat Single Sign-On 7.6 for RHEL 8 rh-sso7-keycloak-18.0.18-1.redhat_00001.1.el8sso, rh-sso7-keycloak-server-18.0.18-1.redhat_00001.1.el8sso
- RHSA-2024:6878 Released 2024-09-19 · Red Hat rating ImportantRed Hat Single Sign-On 7.6.11 security update on RHEL 7
- Red Hat Single Sign-On 7.6 for RHEL 7 Server rh-sso7-keycloak-18.0.18-1.redhat_00001.1.el7sso, rh-sso7-keycloak-server-18.0.18-1.redhat_00001.1.el7sso
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Red Hat RHEL-8 based Middleware Containers, Red Hat Build of Keycloak and 9 more products — RHSA-2024:6878
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2024-08248 Keycloak: vulnerable redirect uri validation results in open redirecPriority LOW 33
- Advisory ·
Red Hat RHEL-8 based Middleware Containers, Red Hat Build of Keycloak and 9 more products — RHSA-2024:6879
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2024-08248 Keycloak: vulnerable redirect uri validation results in open redirecPriority LOW 33
Show 7 more groups
- Advisory ·
Red Hat RHEL-8 based Middleware Containers, Red Hat Build of Keycloak and 9 more products — RHSA-2024:6880
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2024-08248 Keycloak: vulnerable redirect uri validation results in open redirecPriority LOW 33
- Advisory ·
Red Hat RHEL-8 based Middleware Containers, Red Hat Build of Keycloak and 9 more products — RHSA-2024:6882
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2024-08248 Keycloak: vulnerable redirect uri validation results in open redirecPriority LOW 33
- Advisory ·
Red Hat RHEL-8 based Middleware Containers, Red Hat Build of Keycloak and 9 more products — RHSA-2024:6886
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2024-08248 Keycloak: vulnerable redirect uri validation results in open redirecPriority LOW 33
- Advisory ·
Red Hat RHEL-8 based Middleware Containers, Red Hat Build of Keycloak and 9 more products — RHSA-2024:6887
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2024-08248 Keycloak: vulnerable redirect uri validation results in open redirecPriority LOW 33
- Advisory ·
Red Hat RHEL-8 based Middleware Containers, Red Hat Build of Keycloak and 9 more products — RHSA-2024:6888
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2024-08248 Keycloak: vulnerable redirect uri validation results in open redirecPriority LOW 33
- Advisory ·
Red Hat RHEL-8 based Middleware Containers, Red Hat Build of Keycloak and 9 more products — RHSA-2024:6889
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2024-08248 Keycloak: vulnerable redirect uri validation results in open redirecPriority LOW 33
- Advisory ·
Red Hat RHEL-8 based Middleware Containers, Red Hat Build of Keycloak and 9 more products — RHSA-2024:6890
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2024-08248 Keycloak: vulnerable redirect uri validation results in open redirecPriority LOW 33
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Build of Keycloak | Affected | No fix yet |
| Red Hat Single Sign-On 7 | Affected | No fix yet |
| Middleware Containers for OpenShift | Fixed | RHSA-2024:6882 |
| Red Hat Build of Keycloak | Fixed | RHSA-2024:6890 |
| Red Hat JBoss EAP 8.0 for RHEL 8 | Fixed | RHSA-2024:8823 |
| Red Hat JBoss EAP 8.0 for RHEL 9 | Fixed | RHSA-2024:8824 |
| Red Hat JBoss Enterprise Application Platform 8 | Fixed | RHSA-2024:8826 |
| Red Hat Single Sign-On 7 | Fixed | RHSA-2024:6886 |
| Red Hat Single Sign-On 7.6 for RHEL 7 Server | Fixed | RHSA-2024:6878 |
| Red Hat Single Sign-On 7.6 for RHEL 8 | Fixed | RHSA-2024:6879 |
| Red Hat Single Sign-On 7.6 for RHEL 9 | Fixed | RHSA-2024:6880 |
| Red Hat build of Keycloak 22 | Fixed | RHSA-2024:6887 |
| Red Hat build of Keycloak 24 | Fixed | RHSA-2024:6889 |
Timeline
- 2026-10-02 Threatist record created from CVE-2024-8698
- 2026-10-03 Alias added: GHSA-xgfv-xpx8-qhcr
References
Advisory 13
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2024-8698 · CVE Program
- CVE-2024-8698 · NVD
- FIRST EPSS
- GHSA-xgfv-xpx8-qhcr · GitHub Advisory Database · CC BY 4.0
- CVE-2024-8698 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences