CVE-2011-5098

chef-server-api/app/controllers/clients.rb in Chef Server in Chef before 0.9.20, and 0.10.x before 0.10.6, does not require administrative privileges for creating admin clients, which allows remote authenticated users to bypass intended access restrictions by leveraging read permission for the...

org.keycloak:keycloak-adapter-core (8.0.0), org.keycloak:keycloak-admin-client (8.0.0) +57 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (8.0.0)

org.keycloak:keycloak-core MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 8.0.0 - org.keycloak:keycloak-admin-client 8.0.0 -...

de.adorsys.sts:keycloak-storage-provider (>=1.1.23, <=1.1.28), io.phasetwo.keycloak:keycloak-events (0.20) +76 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (22.0.4)

org.keycloak:keycloak-core MAVEN version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.adorsys.sts:keycloak-storage-provider =1.1.23, =0.20, =0.12, =8.16.0, =8.16.0, =8.17.1 -...

org.keycloak:keycloak-adapter-core (2.5.0.final), org.keycloak:keycloak-admin-client (2.5.0.final) +52 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (2.5.0.final)

org.keycloak:keycloak-core MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.0.final - org.keycloak:keycloak-admin-client 2.5.0.final -...

org.keycloak:keycloak-adapter-core (3.2.0.cr1), org.keycloak:keycloak-admin-client (3.2.0.cr1) +56 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (3.2.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.2.0.cr1 - org.keycloak:keycloak-admin-client 3.2.0.cr1 -...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-adapter-core (4.2.0.final) +64 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (4.2.0.final)

org.keycloak:keycloak-core MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

com.github.bogad:itarone-keycloak-starter (>=2.0.0, <=2.1.2), de.samply:auth-client (4.0.1) +65 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (4.0.0.final)

org.keycloak:keycloak-core MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.bogad:itarone-keycloak-starter =2.0.0, =2.1.2 - de.samply:auth-client 4.0.1 -...

io.github.johnjcool:keycloak-cas-services (4.4.0.final), io.gravitee.resource:gravitee-resource-oauth2-provider-keycloak (1.1.0) +65 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (4.4.0.final)

org.keycloak:keycloak-core MAVEN version 4.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.4.0.final -...

org.keycloak:keycloak-adapter-core (2.4.0.final), org.keycloak:keycloak-admin-client (2.4.0.final) +52 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (2.4.0.final)

org.keycloak:keycloak-core MAVEN version 2.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.4.0.final - org.keycloak:keycloak-admin-client 2.4.0.final -...

org.keycloak:keycloak-account-api (1.2.0.beta1), org.keycloak:keycloak-account-freemarker (1.2.0.beta1) +80 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.2.0.beta1)

org.keycloak:keycloak-core MAVEN version 1.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.2.0.beta1 - org.keycloak:keycloak-account-freemarker 1.2.0.beta1 ...

org.keycloak:keycloak-adapter-core (3.4.1.cr1), org.keycloak:keycloak-admin-client (3.4.1.cr1) +56 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (3.4.1.cr1)

org.keycloak:keycloak-core MAVEN version 3.4.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.4.1.cr1 - org.keycloak:keycloak-admin-client 3.4.1.cr1 -...

org.keycloak:keycloak-adapter-core (3.4.0.cr1), org.keycloak:keycloak-admin-client (3.4.0.cr1) +56 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (3.4.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.4.0.cr1 - org.keycloak:keycloak-admin-client 3.4.0.cr1 -...

org.keycloak:keycloak-adapter-core (3.3.0.final), org.keycloak:keycloak-admin-client (3.3.0.final) +57 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (3.3.0.final)

org.keycloak:keycloak-core MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.3.0.final - org.keycloak:keycloak-admin-client 3.3.0.final -...

org.keycloak:keycloak-adapter-core (3.3.0.cr1), org.keycloak:keycloak-admin-client (3.3.0.cr1) +56 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (3.3.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.3.0.cr1 - org.keycloak:keycloak-admin-client 3.3.0.cr1 -...

org.keycloak:keycloak-adapter-core (3.3.0.cr2), org.keycloak:keycloak-admin-client (3.3.0.cr2) +56 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (3.3.0.cr2)

org.keycloak:keycloak-core MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.3.0.cr2 - org.keycloak:keycloak-admin-client 3.3.0.cr2 -...

org.keycloak:keycloak-adapter-core (2.2.0.cr1), org.keycloak:keycloak-admin-client (2.2.0.cr1) +51 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (2.2.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.2.0.cr1 - org.keycloak:keycloak-admin-client 2.2.0.cr1 -...

org.keycloak:keycloak-adapter-core (2.3.0.final), org.keycloak:keycloak-admin-client (2.3.0.final) +51 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (2.3.0.final)

org.keycloak:keycloak-core MAVEN version 2.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.3.0.final - org.keycloak:keycloak-admin-client 2.3.0.final -...

org.keycloak:keycloak-adapter-core (2.4.0.cr1), org.keycloak:keycloak-admin-client (2.4.0.cr1) +52 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (2.4.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.4.0.cr1 - org.keycloak:keycloak-admin-client 2.4.0.cr1 -...

org.keycloak:keycloak-adapter-core (2.3.0.cr1), org.keycloak:keycloak-admin-client (2.3.0.cr1) +51 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (2.3.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.3.0.cr1 - org.keycloak:keycloak-admin-client 2.3.0.cr1 -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.beta2), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.0.beta2) +49 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.0-beta-4)

org.keycloak:keycloak-core MAVEN version 1.0-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.beta2 -...