Redhat.com vulnerabilities

Products

• Keycloak 4
• Rhacm 3
• Wildfly-elytron 3

Newest

• redhat advanced cluster management for kubernetes, redhat.com rhacm +1 more The grc-policy-propagator allows security escalation within the cluster. The propagator allows... CVE-2023-3027 7.8 HighJune 5, 2023
• keycloak, redhat openshift container platform, openshift container platform for ibm linuxone +2 more +4 more Keycloak vulnerable to user impersonation via stolen UUID code CVE-2023-0264 Public exploitFix available 5.0 MediumMarch 2, 2023
• redhat.com wildfly-elytron, redhat jboss enterprise application platform, wildfly elytron +2 more Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator CVE-2022-3143 Fix available 7.4 HighJanuary 11, 2023
• keycloak Keycloak: Impersonation and lockout possible through incorrect handling of email trust CVE-2023-0105 Fix available 6.5 MediumJanuary 11, 2023
• redhat keycloak Keycloak has lack of validation of access token on client registrations endpoint CVE-2023-0091 Fix available 3.8 LowJanuary 11, 2023
• redhat advanced cluster management for kubernetes, redhat.com rhacm +1 more RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF)... CVE-2022-3841 7.8 HighJanuary 11, 2023
• keycloak Keycloak vulnerable to path traversal via double URL encoding CVE-2022-3782 Public exploitFix available 9.1 CriticalDecember 13, 2022
• redhat wildfly elytron, quarkus, redhat build of quarkus +11 more +13 more Observable Discrepancy in Wildfly Elytron CVE-2021-3642 Fix available 5.3 MediumAugust 5, 2021
• redhat.com rhacm, redhat advanced cluster management for kubernetes +1 more A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were... CVE-2020-25688 3.5 LowNovember 23, 2020
• redhat wildfly elytron, netapp oncommand insight, redhat codeready studio +4 more +6 more Session Fixation in WildFly Elytron CVE-2020-10714 Fix available 7.5 HighSeptember 23, 2020