Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 8

Fixed packages 2

Vulnerabilities 3

• High 7.7
  CVE-2023-6563

  Keycloak: offline session token dos

  An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (> 500,000 users with each having at least 2 saved sessions). If an attacker creates two or more user sessi…

  Red Hat Red Hat Build of Keycloak RHEL-8 based Middleware Containers Red Hat Single Sign-On 7.6 for RHEL 7 Maven
  Dec 14, 2023
• High 7.1
  CVE-2023-6291

  Keycloak: redirect_uri validation bypass

  A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other user…

  Red Hat Red Hat Single Sign-On 7 Red Hat Data Grid 8 Red Hat Fuse 7 Maven
  Jan 26, 2024
• Medium 4.6
  CVE-2023-6134

  Keycloak: reflected xss via wildcard in oidc redirect_uri

  A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks…

  Red Hat Red Hat Single Sign-On 7 RHEL-8 based Middleware Containers Red Hat Single Sign-On 7.6 for RHEL 8 Maven
  Dec 14, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2249673
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2251407
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2253308
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7856.json
• report
  https://access.redhat.com/security/cve/CVE-2023-6134
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6134
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6134
• report
  https://access.redhat.com/security/cve/CVE-2023-6291
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6291
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6291
• report
  https://access.redhat.com/security/cve/CVE-2023-6563
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6563
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6563
• article
  https://github.com/keycloak/keycloak/issues/13340