Skip to content
OpenAdvisories

Vendor

redhat.com

6 known vulnerabilities.

Products

Keycloak 4 Wildfly-elytron 1 RHACM 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2023-0264 Public exploit

    Keycloak vulnerable to user impersonation via stolen UUID code

    A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and g…

    redhat.com Keycloak org.keycloak:keycloak-services Maven
  • High 7.4
    CVE-2022-3143

    Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator

    wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.…

    redhat.com Wildfly-elytron org.wildfly.security:wildfly-elytron Maven
  • High 7.8
    CVE-2022-3841

    RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in th…

    redhat.com RHACM