Red Hat Single Sign-On 7.6.10 for RHEL 8, based on the Keycloak project, fixes three security vulnerabilities: CVE-2024-4629, which allows potential bypass of brute force protection; CVE-2024-7341, a session fixation vulnerability in Elytron SAML adapters; and CVE-2024-5967, which leaks configured LDAP bind credentials through the Keycloak admin console. These issues could impact authentication mechanisms and credential confidentiality. The update is a replacement for version 7.6.9 and is rated moderate in severity by Red Hat. The advisory does not provide CVSS scores but references CVE pages for further details.

The vulnerabilities could allow attackers to bypass brute force protections, fixate sessions in SAML adapters potentially leading to unauthorized session use, and leak sensitive LDAP bind credentials via the admin console. These issues may compromise authentication integrity and confidentiality of credentials in affected Red Hat Single Sign-On 7.6 installations on RHEL 8. Red Hat rates the overall security impact as moderate.

Red Hat has released Red Hat Single Sign-On 7.6.10 packages for RHEL 8 that address these vulnerabilities. Users should apply this update to remediate the issues. Before applying the update, ensure all previously released errata relevant to the system have been applied. Detailed update instructions are available at Red Hat's official documentation. No additional mitigation steps are indicated in the advisory.