CveMateVulnerability intelligence

Redhat Single Sign On vulnerabilities, page 3

111 vulnerabilities

Known vulnerabilities in Redhat Single Sign On, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2020-10758org.keycloakkeycloak-parent+36y ago16-09-2020 15:05

A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified keycloak server, all with a Content-Length header value that exceeds the actual byte count of the request body.CVE-2020-10734org.keycloakkeycloak-oidc-client-adapter-pom+45y ago11-02-2021 15:29

A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable.CVE-2022-2256org.keycloakkeycloak-parent+24y ago01-09-2022 19:57

A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7. This flaw allows a privileged attacker to execute malicious scripts in the admin console, abusing the default roles functionality.CVE-2022-2764debianundertow+114y ago01-09-2022 00:00

A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.CVE-2022-2668org.keycloakkeycloak-parent+24y ago05-08-2022 16:46

An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabled CVE-2022-2237Npmkeycloak-connect+23y ago27-03-2023 00:00

A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerability in the checkSso function.CVE-2022-1274org.keycloakkeycloak-services+33y ago29-03-2023 00:00

A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.CVE-2022-1259ubuntuundertow+104y ago31-08-2022 00:00

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.CVE-2022-1466org.keycloakkeycloak-core+24y ago26-04-2022 18:33

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.CVE-2022-1278org.wildfly.bomwildfly+84y ago13-09-2022 13:38

A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.CVE-2022-1319debianundertow+84y ago31-08-2022 00:00

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second SEND_HEADERS response packet instead of a CPONG.CVE-2022-0853redhatdescision_manager+44y ago11-03-2022 17:54

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.CVE-2022-0225org.keycloakkeycloak-core+24y ago26-08-2022 17:25

A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new group from the admin console, leading to a stored Cross-site scripting (XSS) attack.CVE-2022-0084debianjboss-xnio+64y ago26-08-2022 17:25

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.CVE-2022-4361org.keycloakkeycloak-services+53y ago07-07-2023 19:57

Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL value or the redirect_uri.CVE-2022-4492debianundertow+123y ago23-02-2023 00:00

The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.CVE-2022-4137org.keycloakkeycloak-parent+23y ago25-09-2023 19:17

A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrator to interact with a link in order to be vulnerable. This may compromise user details, allowing it to be changed or collected by an attacker.CVE-2022-4039redhatopenshift_container_platform+43y ago22-09-2023 14:00

A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.CVE-2022-3916org.keycloakkeycloak-parent+63y ago20-09-2023 14:28

A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especially if cookies are not cleared), due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to resolve a user session attached to a previously authenticated user; when utilizing the refresh token, they will be issued a token for the original user.CVE-2024-1635debianundertow+112y ago19-02-2024 21:23

A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the server will end with both memory and open file limits exhausted at some point, depending on the amount of memory available. At HTTP upgrade to remoting, the WriteTimeoutStreamSinkConduit leaks connections if RemotingConnection is closed by Remoting ServerConnectionOpenListener. Because the remoting connection originates in Undertow as part of the HTTP upgrade, there is an external layer to the remoting connection. This connection is unaware of the outermost layer when closing the connection during the connection opening procedure. Hence, the Undertow WriteTimeoutStreamSinkConduit is not notified of the closed connection in this scenario. Because WriteTimeoutStreamSinkConduit creates a timeout task, the whole dependency tree leaks via that task, which is added to XNIO WorkerThread. So, the workerThread points to the Undertow conduit, which contains the connections and causes the leak.