RHSA-2023:1043: rh-sso7-keycloak Red Hat

Published

Published 30-09-2024Last modified 13-10-2026

Vulnerability summary

RHSA-2023:1043 is a critical (CVSS 9.8) vulnerability in rh-sso7-keycloak Red Hat.

Priority

Prioritisesevere

Severe, CVSS 9.8 (OSV · Red hat); no exploitation reported by the 5 checked sources; EPSS not yet published

Source freshness unavailable

How is this decided?

CVSS score

9.8/10

010

Critical · v3.1 (OSV · Red hat), selected by version preference

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

30-09-2024
PublishedVulnerability first disclosed.
13-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7

CVSS metrics

1 score · 1 source · 1 version

v3.19.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat2 products

rh-sso7-keycloak< 0:18.0.6-1.redhat_00001.1.el7sso
rh-sso7-keycloak-server< 0:18.0.6-1.redhat_00001.1.el7sso

1 vendor · 2 products

References

147 links

Show all 100 references

bugzilla.redhat.com/show_bug.cgi?id=2105075REPORT
bugzilla.redhat.com/show_bug.cgi?id=2117506REPORT
bugzilla.redhat.com/show_bug.cgi?id=2126789REPORT
bugzilla.redhat.com/show_bug.cgi?id=2129706REPORT
bugzilla.redhat.com/show_bug.cgi?id=2129707REPORT
bugzilla.redhat.com/show_bug.cgi?id=2129709REPORT
bugzilla.redhat.com/show_bug.cgi?id=2135244REPORT
bugzilla.redhat.com/show_bug.cgi?id=2135247REPORT
bugzilla.redhat.com/show_bug.cgi?id=2135770REPORT
bugzilla.redhat.com/show_bug.cgi?id=2135771REPORT
bugzilla.redhat.com/show_bug.cgi?id=2138971REPORT
bugzilla.redhat.com/show_bug.cgi?id=2140597REPORT
bugzilla.redhat.com/show_bug.cgi?id=2141404REPORT
bugzilla.redhat.com/show_bug.cgi?id=2145194REPORT
bugzilla.redhat.com/show_bug.cgi?id=2148496REPORT
bugzilla.redhat.com/show_bug.cgi?id=2150009REPORT
bugzilla.redhat.com/show_bug.cgi?id=2155681REPORT
bugzilla.redhat.com/show_bug.cgi?id=2155682REPORT
bugzilla.redhat.com/show_bug.cgi?id=2155970REPORT
bugzilla.redhat.com/show_bug.cgi?id=2156263REPORT
bugzilla.redhat.com/show_bug.cgi?id=2156324REPORT
bugzilla.redhat.com/show_bug.cgi?id=2158585REPORT
bugzilla.redhat.com/show_bug.cgi?id=2160585REPORT
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1043.jsonAdvisory
access.redhat.com/security/cve/CVE-2018-14040REPORT
www.cve.org/CVERecord?id=CVE-2018-14040Advisory
nvd.nist.gov/vuln/detail/CVE-2018-14040Advisory
access.redhat.com/security/cve/CVE-2018-14042REPORT
www.cve.org/CVERecord?id=CVE-2018-14042Advisory
nvd.nist.gov/vuln/detail/CVE-2018-14042Advisory
access.redhat.com/security/cve/CVE-2019-11358REPORT
www.cve.org/CVERecord?id=CVE-2019-11358Advisory
nvd.nist.gov/vuln/detail/CVE-2019-11358Advisory
blog.jquery.com/2019/04/10/jquery-3-4-0-released/ARTICLE
www.drupal.org/sa-core-2019-006ARTICLE
access.redhat.com/security/cve/CVE-2020-11022REPORT
www.cve.org/CVERecord?id=CVE-2020-11022Advisory
nvd.nist.gov/vuln/detail/CVE-2020-11022Advisory
github.com/advisories/GHSA-gxr4-xjj5-5px2Advisory
access.redhat.com/security/cve/CVE-2020-11023REPORT
bugzilla.redhat.com/show_bug.cgi?id=1850004REPORT
www.cve.org/CVERecord?id=CVE-2020-11023Advisory
nvd.nist.gov/vuln/detail/CVE-2020-11023Advisory
blog.jquery.com/2020/04/10/jquery-3-5-0-released/ARTICLE
www.cisa.gov/known-exploited-vulnerabilities-catalogARTICLE
access.redhat.com/security/cve/CVE-2021-35065REPORT
www.cve.org/CVERecord?id=CVE-2021-35065Advisory
nvd.nist.gov/vuln/detail/CVE-2021-35065Advisory
security.snyk.io/vuln/SNYK-JS-GLOBPARENT-1314294ARTICLE
access.redhat.com/security/cve/CVE-2021-44906REPORT
www.cve.org/CVERecord?id=CVE-2021-44906Advisory
nvd.nist.gov/vuln/detail/CVE-2021-44906Advisory
github.com/advisories/GHSA-xvch-5gv4-984hAdvisory
access.redhat.com/security/cve/CVE-2022-1274REPORT
www.cve.org/CVERecord?id=CVE-2022-1274Advisory
nvd.nist.gov/vuln/detail/CVE-2022-1274Advisory
github.com/keycloak/keycloak/security/advisories/GHSA-m4fv-gm5m-4725ARTICLE
access.redhat.com/security/cve/CVE-2022-1438REPORT
www.cve.org/CVERecord?id=CVE-2022-1438Advisory
nvd.nist.gov/vuln/detail/CVE-2022-1438Advisory
access.redhat.com/security/cve/CVE-2022-1471REPORT
www.cve.org/CVERecord?id=CVE-2022-1471Advisory
nvd.nist.gov/vuln/detail/CVE-2022-1471Advisory
github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2ARTICLE
access.redhat.com/security/cve/CVE-2022-2764REPORT
www.cve.org/CVERecord?id=CVE-2022-2764Advisory
nvd.nist.gov/vuln/detail/CVE-2022-2764Advisory
access.redhat.com/security/cve/CVE-2022-3916REPORT
www.cve.org/CVERecord?id=CVE-2022-3916Advisory
nvd.nist.gov/vuln/detail/CVE-2022-3916Advisory
access.redhat.com/security/cve/CVE-2022-4137REPORT
www.cve.org/CVERecord?id=CVE-2022-4137Advisory
nvd.nist.gov/vuln/detail/CVE-2022-4137Advisory
access.redhat.com/security/cve/CVE-2022-24785REPORT
www.cve.org/CVERecord?id=CVE-2022-24785Advisory
nvd.nist.gov/vuln/detail/CVE-2022-24785Advisory
github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4ARTICLE
access.redhat.com/security/cve/CVE-2022-25857REPORT
www.cve.org/CVERecord?id=CVE-2022-25857Advisory
nvd.nist.gov/vuln/detail/CVE-2022-25857Advisory
bitbucket.org/snakeyaml/snakeyaml/issues/525ARTICLE
access.redhat.com/security/cve/CVE-2022-31129REPORT
www.cve.org/CVERecord?id=CVE-2022-31129Advisory
nvd.nist.gov/vuln/detail/CVE-2022-31129Advisory
github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9gARTICLE
access.redhat.com/security/cve/CVE-2022-37603REPORT
www.cve.org/CVERecord?id=CVE-2022-37603Advisory
nvd.nist.gov/vuln/detail/CVE-2022-37603Advisory
access.redhat.com/security/cve/CVE-2022-38749REPORT
www.cve.org/CVERecord?id=CVE-2022-38749Advisory

Showing 100 of 147.