Red Hat Security Advisory: Red Hat Single Sign-On 7.4.4 security update on RHEL 7
New Red Hat Single Sign-On 7.4.4 packages are now available for Red Hat Enterprise Linux 7.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-27826US | medium4.2 | — | ||
A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using Account REST API. This flaw allows an attacker to change its… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (3)
- Behobenrh-sso7-keycloak-0:9.0.10-1.redhat_00001.1.el7sso.noarch as a component of Red Hat Single Sign-On 7.4 for RHEL 7 Server
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5527 - Behobenrh-sso7-keycloak-0:9.0.10-1.redhat_00001.1.el7sso.src as a component of Red Hat Single Sign-On 7.4 for RHEL 7 Server
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5527 - Behobenrh-sso7-keycloak-server-0:9.0.10-1.redhat_00001.1.el7sso.noarch as a component of Red Hat Single Sign-On 7.4 for RHEL 7 Server
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5527
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan