RHSA-2021:2063 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.7 security update on RHEL 6

Bulletin has no description...

Hard-Earned Lessons in Access Control at Scale: Enforcing Identity and Policy across Trust Boundaries with Reverse Proxies and MTLS

In today's enterprise environment, traditional access methods such as Virtual Private Networks VPNs and application-specific Single Sign-On SSO often fall short when it comes to securely scaling access for a distributed and dynamic workforce. This paper presents our experience implementing a...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.0.13 Update

New Red Hat build of Keycloak 26.0.13 packages are available from the Customer Portal Red Hat build of Keycloak 26.0.13 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security...

RHSA-2025:11640 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update on RHEL 9

Bulletin has no description...

RHSA-2025:11639 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update on RHEL 8

Bulletin has no description...

RHSA-2025:11638 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update on RHEL 7

Bulletin has no description...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update

A new security update is now available for Red Hat Single Sign-On 7.6 from the Customer Portal. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update on RHEL 7

New Red Hat Single Sign-On 7.6.12 packages are now available for Red Hat Enterprise Linux 7. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update on RHEL 9

New Red Hat Single Sign-On 7.6.12 packages are now available for Red Hat Enterprise Linux 9. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 for OpenShift image security update

A new image is available for Red Hat Single Sign-On 7.6.12, running on OpenShift Container Platform 3.10 and 3.11, and 4.3. Red Hat Single Sign-On is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat Single Sign-On for OpenShift...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update on RHEL 8

New Red Hat Single Sign-On 7.6.12 packages are now available for Red Hat Enterprise Linux 8. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release...

RHEL 7 : Red Hat Single Sign-On 7.6.12 security update on RHEL 7 (Moderate) (RHSA-2025:11638)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:11638 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on...

RHEL 9 : Red Hat Single Sign-On 7.6.12 security update on RHEL 9 (Moderate) (RHSA-2025:11640)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:11640 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on...

RHEL 8 : Red Hat Single Sign-On 7.6.12 security update on RHEL 8 (Moderate) (RHSA-2025:11639)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:11639 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on...

ETQ Reliance CG 代码问题漏洞

ETQ Reliance CG is a quality management system from ETQ Corporation. A security vulnerability exists in ETQ Reliance CG that stems from the /resources/sessions/sso endpoint not disabling external entity parsing, which could lead to an XML external entity injection attack...

Thinkgem JeeSite 输入验证错误漏洞

Thinkgem JeeSite is an open source Java EE enterprise-class rapid development platform of China Zhuo Yuan Thinkgem company . The platform includes system permissions components , data permissions components , data dictionary components , core tools components , view manipulation components ,...

IITB SSO 安全漏洞

IITB SSO is a single sign-on system from IITB India. A security vulnerability exists in IITB SSO v1.1.0, which stems from a misconfiguration leading to sensitive data leakage...

CVE-2025-6701 Xuxueli xxl-sso doLogin redirect

A vulnerability, which was classified as problematic, has been found in Xuxueli xxl-sso 1.1.0. This issue affects some unknown processing of the file /xxl-sso-server/doLogin. The manipulation of the argument redirecturl leads to open redirect. The attack may be initiated remotely. The exploit has...

xxl-sso 安全漏洞

xxl-sso is a distributed single sign-on framework by the individual developer Xu Xueli. A security vulnerability exists in xxl-sso version 1.1.0, which is caused by incorrect operation of the errorMsg parameter in the file /xxl-sso-server/login, resulting in a cross-site scripting attack...

Quest KACE Systems Management Appliance 14.1 Authentication Bypass

Seralys Security Advisory - Quest KACE SMA contains an authentication bypass vulnerability that allows attackers to impersonate legitimate users without valid credentials. The vulnerability exists in the SSO authentication handling mechanism and can lead to complete administrative takeover. Versi...