red hat - CVE CyberSecurity Database News (Page 3)

Apr 25, 2024 Exploit red hat red hat single sign-on 7

CVE-2023-6484: Log Injection Flaw Discovered in Keycloak's WebAuthn Authentication Mode - Analyzing the Impact and Exploring Possible Exploits

Recently, a log injection vulnerability (CVE-2023-6484) was discovered in Keycloak's WebAuthn Authentication Mode. This vulnerability enables an attacker to inject a text string

Apr 25, 2024 Exploit Java red hat Red Hat build of Quarkus 3.2.9.Final

CVE-2023-5675: Quarkus Authorization Bypass Vulnerability in JAX-RS Endpoints

Summary: Security researchers have discovered a critical authorization bypass vulnerability in Quarkus, a popular Java-based Kubernetes-native framework. The vulnerability impacts both RestEasy Classic and Reactive

Apr 25, 2024 Exploit red hat Red Hat build of Keycloak 22.0.10

CVE-2023-3597 - Keycloak Authentication Bypass Vulnerability via Client Step-Up Authentication Misvalidation

A critical security vulnerability (CVE-2023-3597) has been discovered in Keycloak, a widely-used open-source Identity and Access Management (IAM) solution. This vulnerability allows an attacker to

Apr 18, 2024 red hat red hat enterprise linux 8

CVE-2023-3758: Race Condition Flaw in SSSD - GPO Policy Inconsistency and Potential Improper Authorization

In today's post, we'll discuss a recently discovered race condition flaw (CVE-2023-3758) found in the System Security Services Daemon (SSSD). This

Apr 17, 2024 Exploit red hat Red Hat build of Keycloak 22

CVE-2024-2419: Keycloak Redirect_URI Validation Flaw Potentially Leading to Access Token Theft

A new security vulnerability, CVE-2024-2419, has been identified in Keycloak's redirect_uri validation logic. This flaw allows attackers to bypass explicitly allowed hosts