Red Hat Security Advisory: Red Hat build of Keycloak 24.0.7 Images Update
Red Hat has released updated container images for the Red Hat build of Keycloak 24.0.7 to address multiple security issues. These include a session fixation vulnerability in Elytron SAML adapters (CVE-2024-7341), an issue where One Time Passcodes (OTP) remain valid longer than their expiration time (CVE-2024-7318), and an open redirect vulnerability on the account page (CVE-2024-7260). The advisory targets deployments of Keycloak 24.0.7 on OpenShift Container Platform for on-premise or private cloud environments. The severity of these issues is rated as moderate by Red Hat. Users are advised to back up their existing installations before applying the updated images.
AI Analysis
Technical Summary
This advisory covers security fixes in the Red Hat build of Keycloak 24.0.7 container images used within OpenShift Container Platform. The fixed vulnerabilities include CVE-2024-7341, a session fixation issue in Elytron SAML adapters; CVE-2024-7318, where One Time Passcodes are valid longer than intended; and CVE-2024-7260, an open redirect vulnerability on the account page. These issues could potentially allow unauthorized session hijacking, OTP misuse, or redirection to malicious sites. The update aligns the container images with the standalone Keycloak product release and is intended for on-premise or private cloud deployments. No CVSS score is provided, but Red Hat rates the severity as moderate.
Potential Impact
The vulnerabilities fixed in this update could allow attackers to exploit session fixation, extend the validity of one-time passcodes beyond their expiration, or perform open redirect attacks on the account page. These issues may lead to unauthorized access or phishing risks. However, no known exploits in the wild have been reported. The impact is limited to deployments of the affected Keycloak version within OpenShift Container Platform environments.
Mitigation Recommendations
Red Hat has released updated container images for Keycloak 24.0.7 that address these vulnerabilities. Users should back up their existing installations, including applications, configuration files, and databases, before applying the update. Applying the updated images will mitigate the session fixation, OTP expiration, and open redirect issues. No additional mitigation steps are indicated by the vendor advisory.
Red Hat Security Advisory: Red Hat build of Keycloak 24.0.7 Images Update
Description
Red Hat has released updated container images for the Red Hat build of Keycloak 24.0.7 to address multiple security issues. These include a session fixation vulnerability in Elytron SAML adapters (CVE-2024-7341), an issue where One Time Passcodes (OTP) remain valid longer than their expiration time (CVE-2024-7318), and an open redirect vulnerability on the account page (CVE-2024-7260). The advisory targets deployments of Keycloak 24.0.7 on OpenShift Container Platform for on-premise or private cloud environments. The severity of these issues is rated as moderate by Red Hat. Users are advised to back up their existing installations before applying the updated images.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers security fixes in the Red Hat build of Keycloak 24.0.7 container images used within OpenShift Container Platform. The fixed vulnerabilities include CVE-2024-7341, a session fixation issue in Elytron SAML adapters; CVE-2024-7318, where One Time Passcodes are valid longer than intended; and CVE-2024-7260, an open redirect vulnerability on the account page. These issues could potentially allow unauthorized session hijacking, OTP misuse, or redirection to malicious sites. The update aligns the container images with the standalone Keycloak product release and is intended for on-premise or private cloud deployments. No CVSS score is provided, but Red Hat rates the severity as moderate.
Potential Impact
The vulnerabilities fixed in this update could allow attackers to exploit session fixation, extend the validity of one-time passcodes beyond their expiration, or perform open redirect attacks on the account page. These issues may lead to unauthorized access or phishing risks. However, no known exploits in the wild have been reported. The impact is limited to deployments of the affected Keycloak version within OpenShift Container Platform environments.
Mitigation Recommendations
Red Hat has released updated container images for Keycloak 24.0.7 that address these vulnerabilities. Users should back up their existing installations, including applications, configuration files, and databases, before applying the update. Applying the updated images will mitigate the session fixation, OTP expiration, and open redirect issues. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:6502
- Cve Count
- 3
- Additional Cves
- ["CVE-2024-7318","CVE-2024-7341"]
- Cvss Version
- null
Threat ID: 6a1df669e29bf47b50461a52
Added to database: 06/01/2026, 21:15:21 UTC
Last enriched: 08/09/2026, 17:32:59 UTC
Last updated: 08/21/2026, 10:52:04 UTC
Views: 111
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.