Red Hat Security Advisory: Red Hat Single Sign-On 7.6.4 security update on RHEL 7

Fixed packages 2

Vulnerabilities 5

• Critical 10.0
  CVE-2022-4361 Public exploit

  Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC

  Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL val…

  Keycloak Keycloak org.keycloak:keycloak-services Maven
  Jul 7, 2023
• High 7.5
  CVE-2023-1108

  Undertow: infinite loop in sslconduit during close

  A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Debian Ubuntu Maven
  Sep 14, 2023
• Medium 6.5
  CVE-2023-1664

  Keycloak Untrusted Certificate Validation vulnerability

  A flaw was found in Keycloak. This flaw depends on a non-default configuration "Revalidate Client Certificate" to be enabled and the reverse proxy is not validating the certificate before Keycloak. Using this method an attacker may choose the certificate whic…

  org.keycloak:keycloak-core Maven
  May 26, 2023
• Medium 5.5
  CVE-2023-2422

  Keycloak: oauth client impersonation

  A flaw was found in Keycloak. A Keycloak server configured to support mTLS authentication for OAuth/OpenID clients does not properly verify the client certificate chain. A client that possesses a proper certificate can authorize itself as any other client, th…

  Red Hat Red Hat Single Sign-On 7 RHEL-8 based Middleware Containers Red Hat Single Sign-On 7.6 for RHEL 7 Maven
  Oct 4, 2023
• Low 3.5
  CVE-2023-2585

  Keycloak: client access via device auth request spoof

  Keycloak's device authorization grant does not correctly validate the device code and client ID. An attacker client could abuse the missing validation to spoof a client consent request and trick an authorization admin into granting consent to a malicious OAut…

  Red Hat Red Hat Single Sign-On 7 RHEL-8 based Middleware Containers Red Hat Single Sign-On 7.6 for RHEL 8 Maven
  Dec 21, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/articles/11258
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2151618
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2174246
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2182196
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2191668
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2196335
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3883.json
• report
  https://access.redhat.com/security/cve/CVE-2022-4361
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-4361
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-4361
• report
  https://access.redhat.com/security/cve/CVE-2023-1108
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1108
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1108
• advisory
  https://github.com/advisories/GHSA-m4mm-pg93-fv78
• report
  https://access.redhat.com/security/cve/CVE-2023-1664
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-1664
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-1664
• advisory
  https://github.com/advisories/GHSA-5cc8-pgp5-7mpm
• report
  https://access.redhat.com/security/cve/CVE-2023-2422
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2422
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2422
• report
  https://access.redhat.com/security/cve/CVE-2023-2585
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2585
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2585