Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update on RHEL 7

Fixed packages 2

Vulnerabilities 8

• High 7.1
  CVE-2023-6291

  Keycloak: redirect_uri validation bypass

  A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other user…

  Red Hat Red Hat Single Sign-On 7 Red Hat Data Grid 8 Red Hat Fuse 7 Maven
  Jan 26, 2024
• Medium 6.5
  CVE-2023-44483

  Apache Santuario: Private Key disclosure in debug-log output

  All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level i…

  Apache Software Foundation Apache Santuario sonarqube-10 org.apache.santuario:xmlsec Debian Ubuntu Wolfi Maven
  Oct 20, 2023
• Medium 5.5
  CVE-2023-2976

  Use of temporary directory for file creation in `FileBackedOutputStream` in Guava

  Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary di…

  Google Guava celeborn-0.6 trino-plugin-clickhouse Debian Ubuntu Azure Linux Wolfi Maven
  Jun 14, 2023
• Medium 5.3
  CVE-2023-26048 Public exploit

  OutOfMemoryError for large multipart without filename in Eclipse Jetty

  Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` wh…

  Eclipse Foundation jetty.project cassandra-reaper jetty9 Debian Ubuntu Wolfi Maven
  Apr 18, 2023
• Medium 5.3
  CVE-2023-6484

  Keycloak: log injection during webauthn authentication or registration

  A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.

  Red Hat Red Hat Single Sign-On 7 RHEL-8 based Middleware Containers Red Hat Single Sign-On 7.6 for RHEL 7 Maven
  Apr 25, 2024
• Medium 4.6
  CVE-2023-6134

  Keycloak: reflected xss via wildcard in oidc redirect_uri

  A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks…

  Red Hat Red Hat Single Sign-On 7 RHEL-8 based Middleware Containers Red Hat Single Sign-On 7.6 for RHEL 9 Maven
  Dec 14, 2023
• Medium 4.6
  CVE-2023-6927

  Keycloak: open redirect via "form_post.jwt" jarm response mode

  A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "form_post.jwt" which could be used to bypass the security patch implemented to address CVE-2023-6134.

  Red Hat Red Hat Single Sign-On 7 RHEL-8 based Middleware Containers Red Hat Single Sign-On 7.6 for RHEL 7 Maven
  Dec 18, 2023
• Low 2.4
  CVE-2023-26049 Public exploit

  Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty

  Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a co…

  Eclipse Foundation jetty.project cassandra-reaper jetty9 Debian Ubuntu Wolfi Maven
  Apr 18, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2215229
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2236340
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2236341
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2246070
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2248423
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2249673
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2251407
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2255027
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0798.json
• report
  https://access.redhat.com/security/cve/CVE-2023-2976
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2976
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2976
• report
  https://access.redhat.com/security/cve/CVE-2023-6134
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6134
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6134
• report
  https://access.redhat.com/security/cve/CVE-2023-6291
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6291
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6291
• report
  https://access.redhat.com/security/cve/CVE-2023-6484
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6484
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6484
• advisory
  https://github.com/advisories/GHSA-j628-q885-8gr5
• report
  https://access.redhat.com/security/cve/CVE-2023-6927
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-6927
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-6927
• report
  https://access.redhat.com/security/cve/CVE-2023-26048
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-26048
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-26048
• article
  https://github.com/eclipse/jetty.project/security/advisories/GHSA-qw69-rqj8-6qw8
• report
  https://access.redhat.com/security/cve/CVE-2023-26049
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-26049
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-26049
• article
  https://github.com/eclipse/jetty.project/security/advisories/GHSA-p26g-97m4-6q7c
• report
  https://access.redhat.com/security/cve/CVE-2023-44483
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-44483
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-44483
• article
  http://www.openwall.com/lists/oss-security/2023/10/20/5
• article
  https://lists.apache.org/thread/vmqbp9mfxtrf0kmbnnmbn3h9j6dr9q55