RHSA-2017:2904 Red Hat Security Advisory: rh-sso7-keycloak security update

Bulletin has no description...

RHEL 8 : Red Hat Single Sign-On 7.6.6 security update on RHEL 8 (Important) (RHSA-2023:7856)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7856 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

Insecure Login

rh-sso7-keycloak is using insecure login. The vulnerability exists because it allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow...

Denial Of Service (DoS)

rh-sso7-keycloak is vulnerable to denial of service. The vulnerability exists due to a redirects to a Keycloak endpoint that accepts multiple invocations with the use of the same "state" parameter...

RHEL 6 : rh-sso7-keycloak (RHSA-2017:2904)

An update for rh-sso7-keycloak is now available for Red Hat Single Sign-On 7.1 for RHEL 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...