DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Single Sign On: Mehrere Schwachstellen
view advisory published 2023-05-10
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Single Sign On ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen oder Sicherheitsvorkehrungen zu umgehen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-4492US | high7.5 | — | ||
The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by defa… | ||||
| CVE-2023-0482US | medium5.5 | Exploit | ||
In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that… | ||||
| CVE-2022-45787US | medium5.5OT elevated | — | ||
Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. This issue affects Apache James M… | ||||
| CVE-2022-41881US | high7.5 | — | ||
Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted… | ||||
| CVE-2022-41854US | medium6.5 | — | ||
Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply co… | ||||
| CVE-2022-38752US | medium6.5 | — | ||
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content… | ||||
| CVE-2021-0341US | high7.5 | — | ||
In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote informat… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:2705 vom 2023-05-10external
- Red Hat Security Advisory RHSA-2023:2706 vom 2023-05-10external
- Red Hat Security Advisory RHSA-2023:2707 vom 2023-05-10external
- Red Hat Security Advisory RHSA-2023:2710 vom 2023-05-10external
- Red Hat Security Advisory RHSA-2023:2713 vom 2023-05-10external
- Red Hat Security Advisory RHSA-2023:3223 vom 2023-05-18external
- Red Hat Security Advisory RHSA-2023:3809 vom 2023-06-29external
- Red Hat Security Advisory RHSA-2023:3813 vom 2023-06-27external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan