Red Hat Security Advisory: Red Hat Single Sign-On 7.1 update
Red Hat Single Sign-On 7.1 is now available for download from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-2585US | medium5.9 | — | ||
Red Hat Keycloak before version 2.5.1 has an implementation of HMAC verification for JWS tokens that uses a method that runs in non-constant time, potentially leaving the applicati… | ||||
| CVE-2016-9589US | high7.5 | — | ||
Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in pers… | ||||
| CVE-2016-8629US | medium6.5 | — | ||
Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service acc… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/documentation/en-us/red_hat_single_sign-on/7.1/html/release_notes/external
- https://access.redhat.com/errata/RHSA-2017:0876self
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=core.service.rhsso&version=7.1external
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1388988external
- 1404782external
- 1412376external
- Canonical URLself
remediations (3)
- FixedRed Hat Single Sign-On 7.1
Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link (you must log in to download the update).
https://access.redhat.com/errata/RHSA-2017:0876 - FixedRed Hat Single Sign-On 7.1
Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link (you must log in to download the update).
https://access.redhat.com/errata/RHSA-2017:0876 - FixedRed Hat Single Sign-On 7.1
Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link (you must log in to download the update).
https://access.redhat.com/errata/RHSA-2017:0876
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan