Skip to content
OpenAdvisories
High RHSA-2020:5526 1 CVE

Red Hat Security Advisory: Red Hat Single Sign-On 7.4.4 security update on RHEL 6

Published Sep 13, 2024 · Updated Mar 18, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Red Hat Single Sign On 7 red_hat_single_sign_on:7::el6 rh-sso7-keycloak 0:9.0.10-1.redhat_00001.1.el6sso
Red Hat · Red Hat Single Sign On 7 red_hat_single_sign_on:7::el6 rh-sso7-keycloak-server 0:9.0.10-1.redhat_00001.1.el6sso

Vulnerabilities 1

  • High 8.8
    CVE-2020-27826

    Authentication Bypass in keycloak

    A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using Account REST API. This flaw allows an attacker to change its own NameID attribute to impersonate the admin user for any particular applicati…

    org.keycloak:keycloak-core Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1905089
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5526.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-27826
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-27826
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-27826