DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Single Sign On: Mehrere Schwachstellen
view advisory published 2019-06-11
Ein Angreifer kann mehrere Schwachstellen in Red Hat Single Sign On ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, einen Denial of Service Zustand hervorzurufen, Informationen auszuspähen, Sicherheitsvorkehrungen zu umgehen oder beliebigen Programmcode auszuführen.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-3888US | critical9.8 | — | ||
A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs t… | ||||
| CVE-2019-3875US | medium4.8OT elevated | — | ||
A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained fro… | ||||
| CVE-2019-3873US | critical9.0 | — | ||
It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude parameter in SAMLresponse XML. An attacker could use this flaw to se… | ||||
| CVE-2019-3872US | medium5.4 | — | ||
It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Application Platform 7.2.x and 7.1.x. An attacker could use this to s… | ||||
| CVE-2019-10157US | medium5.5OT elevated | — | ||
It was found that Keycloak's Node.js adapter before version 4.8.3 did not properly verify the web token received from the server in its backchannel logout . An attacker with local… | ||||
| CVE-2019-11358US | medium6.1 | Exploit | ||
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source ob… | ||||
| CVE-2019-8331US | medium6.1 | Exploit | ||
In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute. | ||||
| CVE-2018-20677US | medium6.1 | — | ||
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property. | ||||
| CVE-2018-20676US | medium6.1 | — | ||
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute. | ||||
| CVE-2016-10735US | medium6.1 | Exploit | ||
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041. | ||||
| CVE-2018-14041US | medium6.1 | Exploit | ||
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy. | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory: RHSA-2019:1456 vom 2019-06-11external
- Red Hat Security Advisory RHSA-2019:2439 vom 2019-08-12external
- Red Hat Security Advisory RHSA-2019:2587 vom 2019-09-05external
- Red Hat Security Advisory RHSA-2019:3023 vom 2019-10-10external
- Red Hat Security Advisory RHSA-2019:3024 vom 2019-10-10external
- Red Hat Security Advisory RHSA-2020:0132 vom 2020-01-16external
- Red Hat Security Advisory RHSA-2020:0133 vom 2020-01-16external
- Red Hat Security Advisory RHSA-2020:1325 vom 2020-04-06external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan