Red Hat Single Sign-On 7.6 Security Advisory (RHSA-2024:18) with Multiple CVE Fixes

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: RHSA-2024:18. 2. Release Date: April 16, 2024. 3. Type/Severity: Security Advisory, Important. 4. Subject: Security update for Red Hat Single Sign-On 7.6. 5. Description: - Red Hat Single Sign-On 7.6 is a standalone server based on the Keycloak project, providing single sign-on capabilities based on authentication and standards. - This release is an enhanced and security update for Red Hat Single Sign-On 7.6.7, including bug fixes, security updates, and improvements. - Contains multiple security fixes, such as authorization bypass, log injection during WebAuthn authentication or registration, path traversal in redirection validation, and unvalidated cross-origin messages leading to DDoS attacks. 6. Affected Products: Red Hat Single Sign-On Text-Only Advisories x86_64. 7. Fixes: - BZ-2248423 - CVE-2023-6484 keycloak: Log Injection during WebAuthn authentication or registration - BZ-2253116 - CVE-2023-6544 keycloak: Authorization Bypass - BZ-2262117 - CVE-2024-1132 keycloak: path traversal in redirection validation - BZ-2262918 - CVE-2024-1249 keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkLoginframe leads to DDoS - BZ-2264928 - CVE-2024-1635 undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol 8. CVEs: - CVE-2023-3597 - CVE-2023-6484 - CVE-2023-6544 - CVE-2024-1132 - CVE-2024-1249 - CVE-2024-1635 9. Solution: Before applying the update, back up the existing installation, including all applications, configuration files, databases, and database settings. 10. Affected Products: Red Hat Single Sign-On Text-Only Advisories x86_64. 11. Contact Information: Red Hat security contact is secalert@redhat.com; more information is available at https://access.redhat.com/security/team/contact/. This information provides detailed descriptions of the vulnerability, remediation steps, and affected products.

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat Single Sign-On 7.6 Security Advisory (RHSA-2024:18) with Multiple CVE Fixes

More from this source