Red Hat Single Sign On vulnerabilities

4 CVEs affecting Red Hat Single Sign On, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-2585, published 2018-03-12.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-12159, published 2017-10-26. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. An attacker could use this flaw to gain access to an authenticated user session, leading to possible…
• CVE-2017-2585, published 2018-03-12. Medium severity, CVSS 5.9. EPSS: 2% chance of exploitation in the next 30 days. Red Hat Keycloak before version 2.5.1 has an implementation of HMAC verification for JWS tokens that uses a method that runs in non-constant time, potentially leaving the application vulnerable to…
• CVE-2016-8629, published 2018-03-12. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service account authentication…
• CVE-2017-12158, published 2017-10-26. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations. An attacker could use this flaw against an authenticated user to attain…