Aller au contenu
en Se connecter
5.4 Moyenne

CVE-2023-6544 A flaw was found in the Keycloak package

Description

A flaw was found in the Keycloak package. This issue occurs due to a permissive regular expression hardcoded for filtering which allows hosts to register a dynamic client. A malicious user with enough information about the environment could jeopardize an environment with this specific Dynamic Client Registration and TrustedDomain configuration previously unauthorized.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat build of Keycloak 22 22 premières → < 22-16 22-16
Red Hat build of Keycloak 22.0.10 Versions non publiées
Red Hat Single Sign-On 7.6 for RHEL 7 Versions non publiées
Red Hat Single Sign-On 7.6 for RHEL 8 Versions non publiées
Red Hat Single Sign-On 7.6 for RHEL 9 Versions non publiées
RHEL-8 based Middleware Containers 7.6 premières → < 7.6-46 7.6-46
RHSSO 7.6.8 Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat build of Keycloak 22

Les 18 CVE de Red Hat build of Keycloak 22 →
CVE-2023-0657 A flaw was found in Keycloak 3.4 Faible CVE-2024-8883 A misconfiguration flaw was found in Keycloak 6.1 Moyenne CVE-2024-8698 A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class 7.7 Élevée CVE-2024-7341 A session fixation issue was discovered in the SAML adapters provided by Keycloak 7.1 Élevée
Suivre cette CVE