Advisories · Technology
Red Hat build of Keycloak 26.4.14.
Every CVE that names Red Hat build of Keycloak 26.4.14 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.14
- Memory corruption
- CVSS 7.4 High
Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.14
- CWE-346
- CVSS 5.4 Medium
Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.14
- Other injection
- Privilege escalation
- CVSS 8.1 High
Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.14
- Broken access control
- CWE-551
- CVSS 8.1 High
Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.14
- CWE-178
- CWE-551
- CVSS 7.4 High
Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.14
- Weak cryptography or TLS
- CVSS 4.3 Medium
Keycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filter
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.14
- CWE-1220
- CVSS 5.4 Medium
Keycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresource
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.14
- Broken access control
- CVSS 6.5 Medium
Keycloak: keycloak: privilege escalation through hardcoded role mapper injection
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.14
- Privilege escalation
- CVSS 4.3 Medium
Keycloak-admin-ui: keycloak-admin-ui:admin ui extension brute-force-user endpoint bypasses fgapv2 user view restrictions
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.14
- Broken access control