org.keycloak:keycloak-account-api (1.4.0.final), org.keycloak:keycloak-account-freemarker (1.4.0.final) +94 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.4.0.final)

org.keycloak:keycloak-core MAVEN version 1.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.4.0.final - org.keycloak:keycloak-account-freemarker 1.4.0.final ...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.final), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.0.final) +50 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.0-rc-1)

org.keycloak:keycloak-core MAVEN version 1.0-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.final -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.3), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.3) +51 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.0.5.final)

org.keycloak:keycloak-core MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.3 -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.1), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.1) +50 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.0-final)

org.keycloak:keycloak-core MAVEN version 1.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.1 -...

org.keycloak:keycloak-account-api (1.0-alpha-3), org.keycloak:keycloak-account-freemarker (1.0-alpha-3) +21 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.0-alpha-3)

org.keycloak:keycloak-core MAVEN version 1.0-alpha-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.0-alpha-3 - org.keycloak:keycloak-account-freemarker 1.0-alpha-3 ...

org.hawkular.accounts:hawkular-accounts (>=2.0.23.final, <=2.0.39.final), org.hawkular.accounts:hawkular-accounts-api (>=2.0.23.final, <=2.0.39.final) +53 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.9.1.final)

org.keycloak:keycloak-core MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.hawkular.accounts:hawkular-accounts =2.0.23.final, =2.0.23.final, =2.0.23.final, =2.0.23.final,...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.5.0), io.apiman:apiman-distro-wildfly9 (1.2.1.final) +88 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.7.0.final)

org.keycloak:keycloak-core MAVEN version 1.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.5.0 - io.apiman:apiman-distro-wildfly9 1.2.1.final...

io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.1.3.final, <=1.2.1.final), io.apiman:apiman-manager-api-security (>=1.1.2.final, <=1.1.3.final) +82 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.2.0.cr1)

org.keycloak:keycloak-core MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =1.1.3.final, =1.1.2.final, =1.1.2.final,...

io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.2.7.beta1, <=1.2.7.final), io.apiman:apiman-distro-eap7 (>=1.2.7.beta1, <=1.2.7.final) +49 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.9.7.final)

org.keycloak:keycloak-core MAVEN version 1.9.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =1.2.7.beta1, =1.2.7.beta1, =1.2.7.beta1,...

org.keycloak:keycloak-account-api (1.0.1.final), org.keycloak:keycloak-account-freemarker (1.0.1.final) +48 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.0.1.final)

org.keycloak:keycloak-core MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.0.1.final - org.keycloak:keycloak-account-freemarker 1.0.1.final ...

be.atbash.ee.security:octopus-keycloak (>=0.4, <=0.6), be.atbash.ee.security:octopus-keycloak-rest (>=0.4, <=0.6) +69 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (>=2.0.0.cr1, <=2.4.0.cr1)

org.keycloak:keycloak-core MAVEN version =2.0.0.cr1, =0.4, =0.4, =0.4, =0.4, =0.8.0, =1.2.8.final, =1.2.8.final, =1.2.8.final, =1.2.8.final, =1.2.8.final, =1.2.8.final, =4.0.0.beta1, =2.0.0.cr1, =2.0.0.cr1, =2.0.0.cr1, =2.4.0.cr1 and more Source cves: CVE-2016-8629 Source advisory:...

org.keycloak:keycloak-account-api (1.8.0.cr2), org.keycloak:keycloak-account-freemarker (1.8.0.cr2) +82 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.8.0.cr2)

org.keycloak:keycloak-core MAVEN version 1.8.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.8.0.cr2 - org.keycloak:keycloak-account-freemarker 1.8.0.cr2 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.7.3), io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (1.2.6.final) +55 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.9.4.final)

org.keycloak:keycloak-core MAVEN version 1.9.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.7.3 -...

org.hawkular.accounts:hawkular-accounts (>=2.0.11.final, <=2.0.13.final), org.hawkular.accounts:hawkular-accounts-api (>=2.0.11.final, <=2.0.13.final) +98 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.8.0.cr1)

org.keycloak:keycloak-core MAVEN version 1.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.hawkular.accounts:hawkular-accounts =2.0.11.final, =2.0.11.final, =2.0.11.final, =2.0.11.final,...

org.jboss.errai:errai-security-demo (>=3.1.0.cr1, <=3.1.0.final), org.jboss.errai:errai-security-keycloak (>=3.1.0.cr1, <=3.1.0.final) +41 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.0-beta-2)

org.keycloak:keycloak-core MAVEN version 1.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.errai:errai-security-demo =3.1.0.cr1, =3.1.0.cr1, =3.1.0.final -...

org.keycloak:keycloak-account-api (1.2.0.beta1), org.keycloak:keycloak-account-freemarker (1.2.0.beta1) +80 more potentially affected by CVE-2016-8629 via org.keycloak:keycloak-core (1.2.0.beta1)

org.keycloak:keycloak-core MAVEN version 1.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.2.0.beta1 - org.keycloak:keycloak-account-freemarker 1.2.0.beta1 ...

RHEL 7 : Red Hat Single Sign-On 7.1 update on RHEL 7 (Moderate) (RHSA-2017:0873)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0873 advisory. Red Hat Single Sign-On is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-o...

RHEL 6 : Red Hat Single Sign-On 7.1 update on RHEL 6 (Moderate) (RHSA-2017:0872)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0872 advisory. Red Hat Single Sign-On is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-o...

CVE-2016-8629

CVE-2016-8629 affects Red Hat Keycloak prior to version 2.4.0. The vulnerability is a failure to properly enforce permissions when handling service account user deletion requests sent to the REST server. An attacker with service account authentication could bypass normal permissions and delete us...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.1 update on RHEL 6

Red Hat Single Sign-On 7.1 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...