org.wildfly.security:wildfly-elytron (1.15.18.final), org.wildfly.security:wildfly-elytron-tests (1.15.18.final) potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.15.18.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.15.18.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.security:wildfly-elytron 1.15.18.final -...

org.wildfly.security.elytron-web:undertow-common-test (1.6.0.cr1), org.wildfly.security:wildfly-elytron (1.10.0.cr1) +1 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.10.0.cr1)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.10.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.security.elytron-web:undertow-common-test...

io.quarkus:quarkus-elytron-security-oauth2 (>=2.0.0.alpha3, <=2.0.3.final), io.quarkus:quarkus-elytron-security-oauth2-deployment (>=2.0.0.alpha3, <=2.0.3.final) +9 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.15.4.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.15.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - io.quarkus:quarkus-elytron-security-oauth2 =2.0.0.alpha3...

org.wildfly.core:wildfly-core-dist-legacy (10.0.0.beta1), org.wildfly.core:wildfly-core-feature-pack (10.0.0.beta1) +3 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.10.0.cr2)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.10.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.core:wildfly-core-dist-legacy 10.0.0.beta1 -...

io.quarkus:quarkus-elytron-security-oauth2 (>=2.3.0.cr1, <=2.3.1.final), io.quarkus:quarkus-elytron-security-oauth2-deployment (>=2.3.0.cr1, <=2.3.1.final) +58 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.17.0.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.17.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - io.quarkus:quarkus-elytron-security-oauth2 =2.3.0.cr1,...

org.wildfly.core:wildfly-core-dist-legacy (13.0.0.beta5), org.wildfly.core:wildfly-core-feature-pack (13.0.0.beta5) +4 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.13.0.cr4)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.13.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.core:wildfly-core-dist-legacy 13.0.0.beta5 -...

com.buession.cas:buession-cas-ticket (>=2.3.0, <=2.3.2), com.buession.cas:buession-cas-ticket-infinispan (>=2.3.0, <=2.3.2) +86 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.12.1.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.12.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - com.buession.cas:buession-cas-ticket =2.3.0, =2.3.0,...

org.wildfly.security:wildfly-elytron (1.15.25.final), org.wildfly.security:wildfly-elytron-tests (1.15.25.final) potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.15.25.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.15.25.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.security:wildfly-elytron 1.15.25.final -...

org.wildfly.security:wildfly-elytron (1.9.0.cr1), org.wildfly.security:wildfly-elytron-tests (1.9.0.cr1) potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.9.0.cr1)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.9.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.security:wildfly-elytron 1.9.0.cr1 -...

de.gedoplan:baselibs-wildfly (36.0.1_02), io.hawt:hawtio-wildfly (2.17.7) +71 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (>=2.0.0.alpha1, <=2.4.0.cr1)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version =2.0.0.alpha1, =0.20.0, =0.20.0, =0.11.0, =0.13.0, =0.11.0, =9.4.50.v20221201, =9.4.50.v20221201, =9.4.50.v20221201, =10.0.13, =12.0.2, =12.0.2, =12.0.2, =10.0.13, =11.0.20 and more Source cves: CVE-2024-1233 Source advisory:...

org.infinispan:infinispan-cli-client (>=11.0.0.alpha, <=11.0.0.dev04), org.wildfly.core:wildfly-core-dist-legacy (11.0.0.beta7) +6 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.11.0.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.11.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.infinispan:infinispan-cli-client =11.0.0.alpha,...

org.wildfly.security.elytron-web:undertow-common-test (1.9.4.final), org.wildfly.security:wildfly-elytron (1.15.22.final) +1 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.15.22.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.15.22.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.security.elytron-web:undertow-common-test...

org.wildfly.security:wildfly-elytron (1.15.11.final), org.wildfly.security:wildfly-elytron-tests (1.15.11.final) potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.15.11.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.15.11.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.security:wildfly-elytron 1.15.11.final -...

keycloak: XSS via assertion consumer service URL in SAML POST-binding flow

A flaw was found in the SAML client registration in Keycloak that could allow an administrator to register malicious JavaScript URIs as Assertion Consumer Service POST Binding URLs ACS, posing a Cross-Site Scripting XSS risk. This issue may allow a malicious admin in one realm or a client with...

BIT-TOMCAT-2021-30640 Auth weakness in JNDIRealm

A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0 to 10.0.5; 9.0.0 to 9.0.45; 8.5.0 to 8.5.65...

BIT-JENKINS-2022-20612

A cross-site request forgery CSRF vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set...

Digital Experience Monitoring | What Is DEM?

Introduction to Digital Experience Monitoring: Illuminating the Basics In an era governed by technology, the satisfaction of an end-user is of utmost importance. It has the power to stimulate or to halt business growth, and frequently determines if a client continues or discontinues their...

Amazon Linux 2 : tomcat (ALASTOMCAT8.5-2024-017)

The version of tomcat installed on the remote host is prior to 8.5.69-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2TOMCAT8.5-2024-017 advisory. 2024-02-15: CVE-2021-30640 was added to this advisory. 2024-02-15: CVE-2021-33037 was added to this advisory. A...

Important: tomcat

Issue Overview: A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to...

Rocky Linux 8 : firefox (RLSA-2022:8554)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8554 advisory. - Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined wi...