org.keycloak:keycloak-broker-saml (1.5.1.final), org.keycloak:keycloak-dependencies-server-all (1.5.1.final) +1 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.5.1.final)

org.keycloak:keycloak-saml-core MAVEN version 1.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.5.1.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-dependencies-server-all (20.0.4), org.keycloak:keycloak-guides (20.0.4) +14 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (20.0.4)

org.keycloak:keycloak-saml-core MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 20.0.4 - org.keycloak:keycloak-guides 20.0.4 -...

org.keycloak:keycloak-saml-adapter-api-public (4.6.0.final), org.keycloak:keycloak-saml-adapter-core (4.6.0.final) +25 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (4.6.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.6.0.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.2.final), org.keycloak:keycloak-saml-adapter-api-public (1.9.2.final) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.9.2.final)

org.keycloak:keycloak-saml-core MAVEN version 1.9.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.2.final -...

org.keycloak:keycloak-broker-saml (1.8.0.final), org.keycloak:keycloak-dependencies-server-all (1.8.0.final) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.8.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.8.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.0.final - org.keycloak:keycloak-dependencies-server-a...

org.bedework.deploy:bw-wf-feature-pack (>=4.1.0, <=5.0.0), org.bedework.deploy:bw-wf-keycloak-saml-filter-feature-pack (>=4.0.3, <=5.0.0) +29 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (17.0.0)

org.keycloak:keycloak-saml-core MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.bedework.deploy:bw-wf-feature-pack =4.1.0, =4.0.3, =5.0.0 -...

org.keycloak:keycloak-saml-adapter-api-public (3.4.2.final), org.keycloak:keycloak-saml-adapter-core (3.4.2.final) +25 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (3.4.2.final)

org.keycloak:keycloak-saml-core MAVEN version 3.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 3.4.2.final -...

org.keycloak:keycloak-broker-saml (1.6.0.final), org.keycloak:keycloak-dependencies-server-all (1.6.0.final) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.6.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.6.0.final - org.keycloak:keycloak-dependencies-server-a...

net.optionfactory.keycloak:optionfactory-keycloak-cie (2.1), net.optionfactory.keycloak:optionfactory-keycloak-spid (2.1) +21 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (20.0.1)

org.keycloak:keycloak-saml-core MAVEN version 20.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - net.optionfactory.keycloak:optionfactory-keycloak-cie 2.1 -...

GHSA-J76J-RQWJ-JMVV Duplicate Advisory: Keycloak Session Fixation vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5rxp-2rhr-qwqv. This link is maintained to preserve external references. Original Description A session fixation issue was discovered in the SAML adapters provided by Keycloak. The session ID and JSESSIONID cook...

PT-2024-38275

Name of the Vulnerable Software and Affected Versions Keycloak SAML adapters affected versions not specified Description A session fixation issue was discovered in the SAML adapters provided by Keycloak. The session ID and JSESSIONID cookie are not changed at login time, even when the...

org.keycloak:keycloak-saml-wildfly-subsystem (>=3.3.0.cr1, <=3.4.0.final), org.keycloak:keycloak-wildfly-server-subsystem (>=3.3.0.cr1, <=3.4.0.final) +51 more potentially affected by CVE-2021-3644 via org.wildfly.core:wildfly-server (3.0.1.final)

org.wildfly.core:wildfly-server MAVEN version 3.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.keycloak:keycloak-saml-wildfly-subsystem =3.3.0.cr1, =3.3.0.cr1, =3.3.0.cr1, =3.4.0.fin...

org.keycloak:keycloak-saml-jetty-adapter-core (2.0.0.cr1), org.keycloak:keycloak-saml-jetty81-adapter (2.0.0.cr1) +17 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-saml-adapter-core (2.0.0.cr1)

org.keycloak:keycloak-saml-adapter-core MAVEN version 2.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 2.0.0.cr1 -...

org.keycloak:keycloak-saml-jetty-adapter-core (1.7.0.cr1), org.keycloak:keycloak-saml-jetty81-adapter (1.7.0.cr1) +17 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-saml-adapter-core (1.7.0.cr1)

org.keycloak:keycloak-saml-adapter-core MAVEN version 1.7.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 1.7.0.cr1 -...

org.keycloak:keycloak-saml-jetty-adapter-core (2.2.1.final), org.keycloak:keycloak-saml-jetty81-adapter (2.2.1.final) +19 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-saml-adapter-core (2.2.1.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 2.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 2.2.1.final -...

org.keycloak:keycloak-saml-jetty-adapter-core (3.2.0.final), org.keycloak:keycloak-saml-jetty81-adapter (3.2.0.final) +22 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-saml-adapter-core (3.2.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 3.2.0.final -...

org.keycloak:keycloak-saml-jetty-adapter-core (3.1.0.final), org.keycloak:keycloak-saml-jetty81-adapter (3.1.0.final) +22 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-saml-adapter-core (3.1.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 3.1.0.final -...

org.keycloak:keycloak-saml-as7-adapter-dist (>=4.0.0.beta1, <=4.3.0.final), org.keycloak:keycloak-saml-as7-modules (>=4.0.0.beta1, <=4.3.0.final) +24 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-saml-adapter-core (>=4.0.0.beta1, <=4.3.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.3.0.final and mo...

org.keycloak:keycloak-saml-jetty-adapter-core (1.6.0.final), org.keycloak:keycloak-saml-jetty81-adapter (1.6.0.final) +17 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-saml-adapter-core (1.6.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 1.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 1.6.0.final -...

org.keycloak:keycloak-saml-jetty-adapter-core (3.4.0.final), org.keycloak:keycloak-saml-jetty81-adapter (3.4.0.final) +22 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-saml-adapter-core (3.4.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 3.4.0.final -...