Threats Tagged 'cve-2024-5967'

Red Hat Single Sign-On 7.6.10 for RHEL 7 addresses three security issues: a potential bypass of brute force protection, a session fixation vulnerability in Elytron SAML adapters, and a leak of configured LDAP bind credentials through the Keycloak admin console. These vulnerabilities have been fixed in this update, which replaces version 7.6.9. The update is rated as having a moderate security impact by Red Hat.

Red Hat Single Sign-On 7.6.10 for RHEL 9 addresses multiple security issues including a potential bypass of brute force protection, session fixation in Elytron SAML adapters, and leakage of configured LDAP bind credentials through the Keycloak admin console. This update replaces version 7.6.9 and includes bug fixes and enhancements. The security impact is rated as moderate by Red Hat. No CVSS scores are provided in the advisory. The update is available as a package for Red Hat Enterprise Linux 9.

Red Hat Single Sign-On 7.6.10 for OpenShift includes security fixes addressing a potential bypass of brute force protection, session fixation in Elytron SAML adapters, and leakage of configured LDAP bind credentials through the Keycloak admin console. These vulnerabilities affect the authentication and session management components of the product. The update is provided as a new container image for use within OpenShift Container Platform versions 3.10, 3.11, and 4.3. The advisory rates the impact as moderate and recommends updating to the latest image to mitigate these issues.

Red Hat Single Sign-On 7.6.10 addresses three security vulnerabilities: a potential bypass of brute force protection (CVE-2024-4629), a session fixation issue in Elytron SAML adapters (CVE-2024-7341), and a leak of configured LDAP bind credentials through the Keycloak admin console (CVE-2024-5967). This update replaces version 7.6.9 and includes bug fixes and enhancements. The vulnerabilities have been rated with moderate security impact by Red Hat Product Security. No CVSS scores are provided in the advisory. Users are advised to back up their installations before applying the update. The update is available through the Red Hat Customer Portal.

Red Hat has released updated container images for the Red Hat build of Keycloak 22.0.12 addressing three security issues: a potential bypass of brute force protection, a session fixation vulnerability in Elytron SAML adapters, and a leak of configured LDAP bind credentials through the Keycloak admin console. These updates align with the standalone Keycloak product release and are intended for use within OpenShift Container Platform deployments. The advisory rates the impact as moderate and recommends applying the updated images after backing up existing installations.

Red Hat has released an update for Red Hat build of Keycloak to address three security issues: a potential bypass of brute force protection, a session fixation vulnerability in elytron SAML adapters, and a leak of configured LDAP bind credentials through the Keycloak admin console. These vulnerabilities have a moderate impact rating. The update replaces Red Hat Single Sign-On 7.6 and includes bug fixes and enhancements. Users are advised to back up their installations before applying the update.

Red Hat Single Sign-On 7.6.10 for RHEL 8 addresses multiple security issues including a potential bypass of brute force protection, session fixation in Elytron SAML adapters, and leakage of configured LDAP bind credentials through the Keycloak admin console. This update replaces version 7.6.9 and includes bug fixes and enhancements. The vulnerabilities have been rated with moderate severity by Red Hat Product Security. No CVSS scores are provided in the advisory, but the issues affect authentication and credential confidentiality.