Advisories · Technology
Red Hat build of Keycloak 26.4.17.
Every CVE that names Red Hat build of Keycloak 26.4.17 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Keycloak-services: keycloak-services: protocol mapper with jsontype=json bypasses token sanitization
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- CWE-20
- CVSS 6.4 Medium
Keycloak-services: keycloak-services: dcr azp and sid claim substitution allows account rest session takeover
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- Authentication bypass
- CVSS 6.5 Medium
Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.roles
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- Broken access control
- CVSS 7.1 High
Keycloak-services: keycloak-services: client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain realm administrator authority
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- Authentication bypass
- CVSS 8.8 High
Keycloak-services: keycloak-services: unverified idp email auto-linking enables account takeover
- Red Hat build of Keycloak 26.4.17
- Red Hat build of Keycloak 26.6.8
- Authentication bypass
- CVSS 8.0 High
Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- Weak cryptography or TLS
- CVSS 7.4 High
Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- Weak cryptography or TLS
- CVSS 8.1 High
Keycloak-services: keycloak-services: dcr protocol mapper config not validated, allowing iat holders to forge sub and aud claims in signed tokens
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- CWE-20
- CVSS 7.4 High
Keycloak-services: keycloak-services: saml broker accepts holder-of-key assertions without proof of key possession
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- Authentication bypass
- CVSS 7.5 High
Keycloak-services: keycloak-services: unauthenticated denial of service via saml soap endpoint unbounded xml parsing
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- Denial of service
- CVSS 8.1 High
Keycloak-services: keycloak-services: uma protection api resourcetype field not validated — cross-owner resource access
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- Broken access control
- CVSS 7.5 High
Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loop
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- Denial of service
- CVSS 7.5 High
Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loop
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- Denial of service
- CVSS 7.5 High
Keycloak-services: keycloak-services: account takeover via authentication race using reset-credentials path
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- Race condition
- CVSS 6.5 Medium
Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling
- Red Hat Build of Debezium 3.6
- Red Hat build of Keycloak 26.4
- CWE-1035
- CVSS 6.5 Medium
Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing
- Red Hat Build of Debezium 3.6
- Red Hat build of Keycloak 26.4
- HTTP request smuggling
- CVSS 6.5 Medium
Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)
- Red Hat Build of Debezium 3.6
- Red Hat build of Keycloak 26.4
- CWE-1035
- CVSS 6.5 Medium
Io.netty/netty-codec-http: netty split transfer-encoding fields bypass final-chunked validation and enable request smuggling
- Red Hat Build of Debezium 3.6
- Red Hat build of Keycloak 26.4
- HTTP request smuggling
- CVSS 7.5 High
Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-20
- CVSS 8.2 High
Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- HTTP request smuggling
- CVSS 7.5 High
Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-20
- CVSS 6.5 Medium
Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line
- Red Hat Build of Debezium 3.6
- Red Hat build of Keycloak 26.4
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-1035
- CVSS 5.3 Medium
Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size
- Red Hat Build of Debezium 3.6
- Red Hat build of Keycloak 26.4
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- Denial of service
- CVSS 7.5 High
Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- Denial of service
- CVSS 7.4 High
Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-173
- CVSS 3.4 Low
Keycloak-services: keycloak-services: saml http-redirect binding response preserves query string leading to parameter pollution
- Red Hat build of Keycloak 26.4
- Red Hat build of Keycloak 26.4.17
- CWE-20