Red Hat Security Advisory: Red Hat build of Keycloak 22.0.12 Update
Red Hat has released an update for Red Hat build of Keycloak to version 22.0.12 addressing multiple security issues. The update fixes a potential bypass of brute force protection, a session fixation vulnerability in elytron SAML adapters, and a leak of configured LDAP bind credentials through the Keycloak admin console. These vulnerabilities have a moderate impact rating. The update replaces Red Hat Single Sign-On 7.6 and includes other bug fixes and enhancements.
AI Analysis
Technical Summary
Red Hat build of Keycloak 22.0.12 is a standalone authentication server providing single sign-on capabilities. This update addresses three security vulnerabilities: CVE-2024-4629, which allows potential bypass of brute force protection; CVE-2024-7341, a session fixation vulnerability in the elytron SAML adapters; and CVE-2024-5967, which leaks configured LDAP bind credentials via the Keycloak admin console. These issues could impact authentication security and credential confidentiality. The update replaces Red Hat Single Sign-On 7.6 and includes other bug fixes and enhancements.
Potential Impact
The vulnerabilities could allow attackers to bypass brute force protection mechanisms, fixate sessions in SAML adapters potentially leading to unauthorized session use, and leak LDAP bind credentials through the admin console, risking credential exposure. The overall impact is rated moderate by Red Hat.
Mitigation Recommendations
Red Hat has released version 22.0.12 of the Red Hat build of Keycloak containing fixes for these vulnerabilities. Users should back up their existing installations, including applications, configurations, and databases, before applying the update. Applying this update mitigates the identified security issues.
Red Hat Security Advisory: Red Hat build of Keycloak 22.0.12 Update
Description
Red Hat has released an update for Red Hat build of Keycloak to version 22.0.12 addressing multiple security issues. The update fixes a potential bypass of brute force protection, a session fixation vulnerability in elytron SAML adapters, and a leak of configured LDAP bind credentials through the Keycloak admin console. These vulnerabilities have a moderate impact rating. The update replaces Red Hat Single Sign-On 7.6 and includes other bug fixes and enhancements.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat build of Keycloak 22.0.12 is a standalone authentication server providing single sign-on capabilities. This update addresses three security vulnerabilities: CVE-2024-4629, which allows potential bypass of brute force protection; CVE-2024-7341, a session fixation vulnerability in the elytron SAML adapters; and CVE-2024-5967, which leaks configured LDAP bind credentials via the Keycloak admin console. These issues could impact authentication security and credential confidentiality. The update replaces Red Hat Single Sign-On 7.6 and includes other bug fixes and enhancements.
Potential Impact
The vulnerabilities could allow attackers to bypass brute force protection mechanisms, fixate sessions in SAML adapters potentially leading to unauthorized session use, and leak LDAP bind credentials through the admin console, risking credential exposure. The overall impact is rated moderate by Red Hat.
Mitigation Recommendations
Red Hat has released version 22.0.12 of the Red Hat build of Keycloak containing fixes for these vulnerabilities. Users should back up their existing installations, including applications, configurations, and databases, before applying the update. Applying this update mitigates the identified security issues.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:6501
- Cve Count
- 3
- Additional Cves
- ["CVE-2024-5967","CVE-2024-7341"]
Threat ID: 6a7891d9bf8831d539c87228
Added to database: 08/09/2026, 14:42:33 UTC
Last enriched: 09/13/2026, 14:51:31 UTC
Last updated: 09/23/2026, 01:47:37 UTC
Views: 40
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.