DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Single Sign On und Keycloak: Mehrere Schwachstellen ermöglicht Privilegieneskalation
view advisory published 2024-09-19
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Single Sign On und Keycloak ausnutzen, um seine Privilegien zu erhöhen und um falsche Informationen darzustellen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-8883US | — | — | ||
A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http:/… | ||||
| CVE-2024-8698US | — | Exploit | ||
A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full documen… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory vom 2024-09-19external
- Red Hat Security Advisory vom 2024-09-19external
- Red Hat Security Advisory vom 2024-09-19external
- Red Hat Security Advisory vom 2024-09-19external
- Red Hat Security Advisory vom 2024-09-19external
- Red Hat Security Advisory vom 2024-09-19external
- Red Hat Security Advisory vom 2024-09-19external
- Red Hat Security Advisory vom 2024-09-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan