Vendor
Red Hat
2,622 known vulnerabilities.
Products
1,392 results · Clear filters · Feed
-
Medium 4.2
Ansible Logs Passwords If PowerShell ScriptBlock is Enabled
Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these l…
-
Medium 5.4
Keycloak Improper Bruteforce Detection
A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.
-
Medium 6.1
Keycloak Open Redirect
A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attack
-
Medium 4.6
Keycloak vulnerable to cross-site scripting via the state parameter
A flaw was found in Keycloak 3.4.3.Final, 4.0.0.Beta2, 4.3.0.Final. When using 'response_mode=form_post' it is possible to inject arbitrary Javascript-Code via the 'state'-parameter in the authentication URL. This allows an XSS-Attack upon succesfully login.
-
Medium 5.3
Exposure of Sensitive Information to an Unauthorized Actor in Undertow
An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data fro…
-
Medium 4.6
A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11. An attacker w…
-
Medium 4.2
Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Se…
-
Medium 6.5
Uncontrolled Resource Consumption in Undertow
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
-
Medium 6.5
A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch wit…
-
Medium 4.2
Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization
The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or con…
-
Medium 4.3
A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqRepor…
-
Medium 4.7
The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build…
-
Medium 6.5
Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to …
-
Medium 6.5
A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this fla…
-
Medium 5.3
It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use …
-
Medium 6.5
A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attack…
-
Medium 5.5
It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash wh…
-
Medium 5.2
Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that…
-
Medium 5.4
It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 ser…
-
Medium 5.4
Keycloak Authentication Error
It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.
-
Medium 6.5
A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to …
-
Medium 5.4
JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomple…
-
Medium 5.3
It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to i…
-
Medium 6.3
Ansible apt_key module does not properly verify key fingerprint
A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.
-
Medium 6.3
The OpenShift Enterprise 3 router does not properly sort routes when processing newly added routes. An attacker with ac…
-
Medium 6.5
A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an a…
-
Medium 4.3
A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before ver…
-
Medium 6.5
Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to t…
-
Medium 4.9
A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create…
-
Medium 6.1
JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload. A malformed XML file, …
-
Medium 6.1
JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. The fla…
-
Medium 5.9
An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a se…
-
Medium 4.1
A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed via GET requests instea…
-
Medium 6.8
When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for th…
-
Medium 6.5
A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowle…
-
Medium 6.5
A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not prop…
-
Medium 6.5
A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" …
-
Medium 5.5
It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuratio…
-
Medium 6.5
keycloak-core discloses system properties
It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the atta…
-
Medium 5.3
OpenStack Neutron Race Condition vulnerability
A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following…