{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-6927.json" } ], "title": "keycloak: open redirect via \"form_post.jwt\" JARM response mode", "tracking": { "current_release_date": "2026-08-08T17:14:29+00:00", "generator": { "date": "2026-08-08T17:14:29+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.12" } }, "id": "CVE-2023-6927", "initial_release_date": "2023-12-18T00:00:00+00:00", "revision_history": [ { "date": "2023-12-18T00:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-08-04T07:10:36+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-08-08T17:14:29+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Single Sign-On 7.6 for RHEL 9", "product": { "name": "Red Hat Single Sign-On 7.6 for RHEL 9", "product_id": "9Base-RHSSO-7.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7.6::el9" } } }, { "category": "product_name", "name": "Red Hat Single Sign-On 7", "product": { "name": "Red Hat Single Sign-On 7", "product_id": "Red Hat Single Sign-On 7", "product_identification_helper": { "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7.6" } } }, { "category": "product_name", "name": "Red Hat Single Sign-On 7.6 for RHEL 8", "product": { "name": "Red Hat Single Sign-On 7.6 for RHEL 8", "product_id": "8Base-RHSSO-7.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7.6::el8" } } }, { "category": "product_name", "name": "Red Hat Single Sign-On 7.6 for RHEL 7 Server", "product": { "name": "Red Hat Single Sign-On 7.6 for RHEL 7 Server", "product_id": "7Server-RHSSO-7.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7.6::el7" } } }, { "category": "product_name", "name": "Single Sign-On 7.6.6", "product": { "name": "Single Sign-On 7.6.6", "product_id": "Single Sign-On 7.6.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7.6.6" } } } ], "category": "product_family", "name": "Red Hat Single Sign-On" }, { "branches": [ { "category": "product_name", "name": "Middleware Containers for OpenShift", "product": { "name": "Middleware Containers for OpenShift", "product_id": "8Base-RHOSE-Middleware", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhosemc:1.0::el8" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_name", "name": "Red Hat build of Keycloak 22", "product": { "name": "Red Hat build of Keycloak 22", "product_id": "9Base-RHBK-22", "product_identification_helper": { "cpe": "cpe:/a:redhat:build_keycloak:22::el9" } } }, { "category": "product_name", "name": "Red Hat build of Keycloak 22.0.8", "product": { "name": "Red Hat build of Keycloak 22.0.8", "product_id": "Red Hat build of Keycloak 22.0.8", "product_identification_helper": { "cpe": "cpe:/a:redhat:build_keycloak:22" } } } ], "category": "product_family", "name": "Red Hat build of Keycloak" }, { "branches": [ { "category": "product_version", "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src", "product": { "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src", "product_id": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.12-1.redhat_00001.1.el9sso?arch=src" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src", "product": { "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src", "product_id": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.12-1.redhat_00001.1.el8sso?arch=src" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src", "product": { "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src", "product_id": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.12-1.redhat_00001.1.el7sso?arch=src" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.src", "product": { "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.src", "product_id": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.11-3.redhat_00001.1.el8sso?arch=src" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.src", "product": { "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.src", "product_id": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.11-3.redhat_00001.1.el9sso?arch=src" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.src", "product": { "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.src", "product_id": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.11-3.redhat_00001.1.el7sso?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "product": { "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "product_id": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.12-1.redhat_00001.1.el9sso?arch=noarch" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "product": { "name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "product_id": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak-server@18.0.12-1.redhat_00001.1.el9sso?arch=noarch" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "product": { "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "product_id": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.12-1.redhat_00001.1.el8sso?arch=noarch" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "product": { "name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "product_id": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak-server@18.0.12-1.redhat_00001.1.el8sso?arch=noarch" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "product": { "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "product_id": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.12-1.redhat_00001.1.el7sso?arch=noarch" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "product": { "name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "product_id": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak-server@18.0.12-1.redhat_00001.1.el7sso?arch=noarch" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "product": { "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "product_id": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.11-3.redhat_00001.1.el8sso?arch=noarch" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "product": { "name": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "product_id": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak-server@18.0.11-3.redhat_00001.1.el8sso?arch=noarch" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "product": { "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "product_id": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.11-3.redhat_00001.1.el9sso?arch=noarch" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "product": { "name": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "product_id": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak-server@18.0.11-3.redhat_00001.1.el9sso?arch=noarch" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "product": { "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "product_id": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.11-3.redhat_00001.1.el7sso?arch=noarch" } } }, { "category": "product_version", "name": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "product": { "name": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "product_id": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-sso7-keycloak-server@18.0.11-3.redhat_00001.1.el7sso?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x", "product": { "name": "rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x", "product_id": "rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x", "product_identification_helper": { "purl": "pkg:oci/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995?arch=s390x&repository_url=registry.redhat.io/rh-sso-7/sso76-openshift-rhel8&tag=7.6-41" } } }, { "category": "product_version", "name": "rhbk/keycloak-rhel9@sha256:c2c04c0b330cf4e13b6e22377e20cfed6648bfabaca8d9b30ed0cea730e7b7bf_s390x", "product": { "name": "rhbk/keycloak-rhel9@sha256:c2c04c0b330cf4e13b6e22377e20cfed6648bfabaca8d9b30ed0cea730e7b7bf_s390x", "product_id": "rhbk/keycloak-rhel9@sha256:c2c04c0b330cf4e13b6e22377e20cfed6648bfabaca8d9b30ed0cea730e7b7bf_s390x", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9@sha256:c2c04c0b330cf4e13b6e22377e20cfed6648bfabaca8d9b30ed0cea730e7b7bf?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=22-7" } } }, { "category": "product_version", "name": "rhbk/keycloak-rhel9-operator@sha256:32817f8250713ae02ef6a1c6837298032ca49b27ff4af3c35c9bb763ad47ba75_s390x", "product": { "name": "rhbk/keycloak-rhel9-operator@sha256:32817f8250713ae02ef6a1c6837298032ca49b27ff4af3c35c9bb763ad47ba75_s390x", "product_id": "rhbk/keycloak-rhel9-operator@sha256:32817f8250713ae02ef6a1c6837298032ca49b27ff4af3c35c9bb763ad47ba75_s390x", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9-operator@sha256:32817f8250713ae02ef6a1c6837298032ca49b27ff4af3c35c9bb763ad47ba75?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=22-10" } } }, { "category": "product_version", "name": "rh-sso-7/sso76-openshift-rhel8@sha256:7b10d4158944fd6c65f16c8b8cd57fb45c7a8c2cc0528bcce127218368ba41c3_s390x", "product": { "name": "rh-sso-7/sso76-openshift-rhel8@sha256:7b10d4158944fd6c65f16c8b8cd57fb45c7a8c2cc0528bcce127218368ba41c3_s390x", "product_id": "rh-sso-7/sso76-openshift-rhel8@sha256:7b10d4158944fd6c65f16c8b8cd57fb45c7a8c2cc0528bcce127218368ba41c3_s390x", "product_identification_helper": { "purl": "pkg:oci/sso76-openshift-rhel8@sha256:7b10d4158944fd6c65f16c8b8cd57fb45c7a8c2cc0528bcce127218368ba41c3?arch=s390x&repository_url=registry.redhat.io/rh-sso-7/sso76-openshift-rhel8&tag=7.6-39" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64", "product": { "name": "rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64", "product_id": "rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64", "product_identification_helper": { "purl": "pkg:oci/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab?arch=amd64&repository_url=registry.redhat.io/rh-sso-7/sso76-openshift-rhel8&tag=7.6-41" } } }, { "category": "product_version", "name": "rhbk/keycloak-rhel9@sha256:7a4e96d7b7b1d25bcc5ce00ea6c5d8d609e9c3368b60972c3995011565ffe5c8_amd64", "product": { "name": "rhbk/keycloak-rhel9@sha256:7a4e96d7b7b1d25bcc5ce00ea6c5d8d609e9c3368b60972c3995011565ffe5c8_amd64", "product_id": "rhbk/keycloak-rhel9@sha256:7a4e96d7b7b1d25bcc5ce00ea6c5d8d609e9c3368b60972c3995011565ffe5c8_amd64", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9@sha256:7a4e96d7b7b1d25bcc5ce00ea6c5d8d609e9c3368b60972c3995011565ffe5c8?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=22-7" } } }, { "category": "product_version", "name": "rhbk/keycloak-operator-bundle@sha256:47323bf5e0d1ec70bfec6d7dd476d1076d879d26cc166af451579e79a56046ec_amd64", "product": { "name": "rhbk/keycloak-operator-bundle@sha256:47323bf5e0d1ec70bfec6d7dd476d1076d879d26cc166af451579e79a56046ec_amd64", "product_id": "rhbk/keycloak-operator-bundle@sha256:47323bf5e0d1ec70bfec6d7dd476d1076d879d26cc166af451579e79a56046ec_amd64", "product_identification_helper": { "purl": "pkg:oci/keycloak-operator-bundle@sha256:47323bf5e0d1ec70bfec6d7dd476d1076d879d26cc166af451579e79a56046ec?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-operator-bundle&tag=22.0.8-1" } } }, { "category": "product_version", "name": "rhbk/keycloak-rhel9-operator@sha256:b24d774edf776b6514935c8a6dc4822891039311f76b104300348418ffda90cc_amd64", "product": { "name": "rhbk/keycloak-rhel9-operator@sha256:b24d774edf776b6514935c8a6dc4822891039311f76b104300348418ffda90cc_amd64", "product_id": "rhbk/keycloak-rhel9-operator@sha256:b24d774edf776b6514935c8a6dc4822891039311f76b104300348418ffda90cc_amd64", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9-operator@sha256:b24d774edf776b6514935c8a6dc4822891039311f76b104300348418ffda90cc?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=22-10" } } }, { "category": "product_version", "name": "rh-sso-7/sso7-rhel8-operator-bundle@sha256:438375181ff28d5a61510a07f6e16d11944ebd6cc0a20961e06f662db3a16b1c_amd64", "product": { "name": "rh-sso-7/sso7-rhel8-operator-bundle@sha256:438375181ff28d5a61510a07f6e16d11944ebd6cc0a20961e06f662db3a16b1c_amd64", "product_id": "rh-sso-7/sso7-rhel8-operator-bundle@sha256:438375181ff28d5a61510a07f6e16d11944ebd6cc0a20961e06f662db3a16b1c_amd64", "product_identification_helper": { "purl": "pkg:oci/sso7-rhel8-operator-bundle@sha256:438375181ff28d5a61510a07f6e16d11944ebd6cc0a20961e06f662db3a16b1c?arch=amd64&repository_url=registry.redhat.io/rh-sso-7/sso7-rhel8-operator-bundle&tag=7.6.6-3" } } }, { "category": "product_version", "name": "rh-sso-7/sso76-openshift-rhel8@sha256:1f39a66794485f27da60afe31e8c7f5db5ece4bcf5a457ee7bad4a72ee70ce2e_amd64", "product": { "name": "rh-sso-7/sso76-openshift-rhel8@sha256:1f39a66794485f27da60afe31e8c7f5db5ece4bcf5a457ee7bad4a72ee70ce2e_amd64", "product_id": "rh-sso-7/sso76-openshift-rhel8@sha256:1f39a66794485f27da60afe31e8c7f5db5ece4bcf5a457ee7bad4a72ee70ce2e_amd64", "product_identification_helper": { "purl": "pkg:oci/sso76-openshift-rhel8@sha256:1f39a66794485f27da60afe31e8c7f5db5ece4bcf5a457ee7bad4a72ee70ce2e?arch=amd64&repository_url=registry.redhat.io/rh-sso-7/sso76-openshift-rhel8&tag=7.6-39" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le", "product": { "name": "rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le", "product_id": "rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le", "product_identification_helper": { "purl": "pkg:oci/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d?arch=ppc64le&repository_url=registry.redhat.io/rh-sso-7/sso76-openshift-rhel8&tag=7.6-41" } } }, { "category": "product_version", "name": "rhbk/keycloak-rhel9@sha256:88f657f1f805ec611ff6ffab89704d86de4affa6cd024be3bd79658561fd544c_ppc64le", "product": { "name": "rhbk/keycloak-rhel9@sha256:88f657f1f805ec611ff6ffab89704d86de4affa6cd024be3bd79658561fd544c_ppc64le", "product_id": "rhbk/keycloak-rhel9@sha256:88f657f1f805ec611ff6ffab89704d86de4affa6cd024be3bd79658561fd544c_ppc64le", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9@sha256:88f657f1f805ec611ff6ffab89704d86de4affa6cd024be3bd79658561fd544c?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=22-7" } } }, { "category": "product_version", "name": "rhbk/keycloak-rhel9-operator@sha256:bb21253f5563ba154c9dbd28560443a5d747211232c70645f4aa61f8e3f30bdf_ppc64le", "product": { "name": "rhbk/keycloak-rhel9-operator@sha256:bb21253f5563ba154c9dbd28560443a5d747211232c70645f4aa61f8e3f30bdf_ppc64le", "product_id": "rhbk/keycloak-rhel9-operator@sha256:bb21253f5563ba154c9dbd28560443a5d747211232c70645f4aa61f8e3f30bdf_ppc64le", "product_identification_helper": { "purl": "pkg:oci/keycloak-rhel9-operator@sha256:bb21253f5563ba154c9dbd28560443a5d747211232c70645f4aa61f8e3f30bdf?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=22-10" } } }, { "category": "product_version", "name": "rh-sso-7/sso76-openshift-rhel8@sha256:b145d1c7d0939d5b44234e2a9fbe7d0aba7b579e4aaf2c4977f8fde6aa97bff2_ppc64le", "product": { "name": "rh-sso-7/sso76-openshift-rhel8@sha256:b145d1c7d0939d5b44234e2a9fbe7d0aba7b579e4aaf2c4977f8fde6aa97bff2_ppc64le", "product_id": "rh-sso-7/sso76-openshift-rhel8@sha256:b145d1c7d0939d5b44234e2a9fbe7d0aba7b579e4aaf2c4977f8fde6aa97bff2_ppc64le", "product_identification_helper": { "purl": "pkg:oci/sso76-openshift-rhel8@sha256:b145d1c7d0939d5b44234e2a9fbe7d0aba7b579e4aaf2c4977f8fde6aa97bff2?arch=ppc64le&repository_url=registry.redhat.io/rh-sso-7/sso76-openshift-rhel8&tag=7.6-39" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 7 Server", "product_id": "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.noarch" }, "product_reference": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "relates_to_product_reference": "7Server-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.src as a component of Red Hat Single Sign-On 7.6 for RHEL 7 Server", "product_id": "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.src" }, "product_reference": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.src", "relates_to_product_reference": "7Server-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 7 Server", "product_id": "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch" }, "product_reference": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "relates_to_product_reference": "7Server-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src as a component of Red Hat Single Sign-On 7.6 for RHEL 7 Server", "product_id": "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src" }, "product_reference": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src", "relates_to_product_reference": "7Server-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el7sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 7 Server", "product_id": "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el7sso.noarch" }, "product_reference": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "relates_to_product_reference": "7Server-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 7 Server", "product_id": "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch" }, "product_reference": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "relates_to_product_reference": "7Server-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso-7/sso7-rhel8-operator-bundle@sha256:438375181ff28d5a61510a07f6e16d11944ebd6cc0a20961e06f662db3a16b1c_amd64 as a component of Middleware Containers for OpenShift", "product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso7-rhel8-operator-bundle@sha256:438375181ff28d5a61510a07f6e16d11944ebd6cc0a20961e06f662db3a16b1c_amd64" }, "product_reference": "rh-sso-7/sso7-rhel8-operator-bundle@sha256:438375181ff28d5a61510a07f6e16d11944ebd6cc0a20961e06f662db3a16b1c_amd64", "relates_to_product_reference": "8Base-RHOSE-Middleware" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64 as a component of Middleware Containers for OpenShift", "product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64" }, "product_reference": "rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64", "relates_to_product_reference": "8Base-RHOSE-Middleware" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso-7/sso76-openshift-rhel8@sha256:1f39a66794485f27da60afe31e8c7f5db5ece4bcf5a457ee7bad4a72ee70ce2e_amd64 as a component of Middleware Containers for OpenShift", "product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1f39a66794485f27da60afe31e8c7f5db5ece4bcf5a457ee7bad4a72ee70ce2e_amd64" }, "product_reference": "rh-sso-7/sso76-openshift-rhel8@sha256:1f39a66794485f27da60afe31e8c7f5db5ece4bcf5a457ee7bad4a72ee70ce2e_amd64", "relates_to_product_reference": "8Base-RHOSE-Middleware" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x as a component of Middleware Containers for OpenShift", "product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x" }, "product_reference": "rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x", "relates_to_product_reference": "8Base-RHOSE-Middleware" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le as a component of Middleware Containers for OpenShift", "product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le" }, "product_reference": "rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le", "relates_to_product_reference": "8Base-RHOSE-Middleware" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso-7/sso76-openshift-rhel8@sha256:7b10d4158944fd6c65f16c8b8cd57fb45c7a8c2cc0528bcce127218368ba41c3_s390x as a component of Middleware Containers for OpenShift", "product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:7b10d4158944fd6c65f16c8b8cd57fb45c7a8c2cc0528bcce127218368ba41c3_s390x" }, "product_reference": "rh-sso-7/sso76-openshift-rhel8@sha256:7b10d4158944fd6c65f16c8b8cd57fb45c7a8c2cc0528bcce127218368ba41c3_s390x", "relates_to_product_reference": "8Base-RHOSE-Middleware" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso-7/sso76-openshift-rhel8@sha256:b145d1c7d0939d5b44234e2a9fbe7d0aba7b579e4aaf2c4977f8fde6aa97bff2_ppc64le as a component of Middleware Containers for OpenShift", "product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:b145d1c7d0939d5b44234e2a9fbe7d0aba7b579e4aaf2c4977f8fde6aa97bff2_ppc64le" }, "product_reference": "rh-sso-7/sso76-openshift-rhel8@sha256:b145d1c7d0939d5b44234e2a9fbe7d0aba7b579e4aaf2c4977f8fde6aa97bff2_ppc64le", "relates_to_product_reference": "8Base-RHOSE-Middleware" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 8", "product_id": "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.noarch" }, "product_reference": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "relates_to_product_reference": "8Base-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.src as a component of Red Hat Single Sign-On 7.6 for RHEL 8", "product_id": "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.src" }, "product_reference": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.src", "relates_to_product_reference": "8Base-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 8", "product_id": "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch" }, "product_reference": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "relates_to_product_reference": "8Base-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src as a component of Red Hat Single Sign-On 7.6 for RHEL 8", "product_id": "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src" }, "product_reference": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src", "relates_to_product_reference": "8Base-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el8sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 8", "product_id": "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el8sso.noarch" }, "product_reference": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "relates_to_product_reference": "8Base-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 8", "product_id": "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch" }, "product_reference": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "relates_to_product_reference": "8Base-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-operator-bundle@sha256:47323bf5e0d1ec70bfec6d7dd476d1076d879d26cc166af451579e79a56046ec_amd64 as a component of Red Hat build of Keycloak 22", "product_id": "9Base-RHBK-22:rhbk/keycloak-operator-bundle@sha256:47323bf5e0d1ec70bfec6d7dd476d1076d879d26cc166af451579e79a56046ec_amd64" }, "product_reference": "rhbk/keycloak-operator-bundle@sha256:47323bf5e0d1ec70bfec6d7dd476d1076d879d26cc166af451579e79a56046ec_amd64", "relates_to_product_reference": "9Base-RHBK-22" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9-operator@sha256:32817f8250713ae02ef6a1c6837298032ca49b27ff4af3c35c9bb763ad47ba75_s390x as a component of Red Hat build of Keycloak 22", "product_id": "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:32817f8250713ae02ef6a1c6837298032ca49b27ff4af3c35c9bb763ad47ba75_s390x" }, "product_reference": "rhbk/keycloak-rhel9-operator@sha256:32817f8250713ae02ef6a1c6837298032ca49b27ff4af3c35c9bb763ad47ba75_s390x", "relates_to_product_reference": "9Base-RHBK-22" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9-operator@sha256:b24d774edf776b6514935c8a6dc4822891039311f76b104300348418ffda90cc_amd64 as a component of Red Hat build of Keycloak 22", "product_id": "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:b24d774edf776b6514935c8a6dc4822891039311f76b104300348418ffda90cc_amd64" }, "product_reference": "rhbk/keycloak-rhel9-operator@sha256:b24d774edf776b6514935c8a6dc4822891039311f76b104300348418ffda90cc_amd64", "relates_to_product_reference": "9Base-RHBK-22" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9-operator@sha256:bb21253f5563ba154c9dbd28560443a5d747211232c70645f4aa61f8e3f30bdf_ppc64le as a component of Red Hat build of Keycloak 22", "product_id": "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:bb21253f5563ba154c9dbd28560443a5d747211232c70645f4aa61f8e3f30bdf_ppc64le" }, "product_reference": "rhbk/keycloak-rhel9-operator@sha256:bb21253f5563ba154c9dbd28560443a5d747211232c70645f4aa61f8e3f30bdf_ppc64le", "relates_to_product_reference": "9Base-RHBK-22" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9@sha256:7a4e96d7b7b1d25bcc5ce00ea6c5d8d609e9c3368b60972c3995011565ffe5c8_amd64 as a component of Red Hat build of Keycloak 22", "product_id": "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:7a4e96d7b7b1d25bcc5ce00ea6c5d8d609e9c3368b60972c3995011565ffe5c8_amd64" }, "product_reference": "rhbk/keycloak-rhel9@sha256:7a4e96d7b7b1d25bcc5ce00ea6c5d8d609e9c3368b60972c3995011565ffe5c8_amd64", "relates_to_product_reference": "9Base-RHBK-22" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9@sha256:88f657f1f805ec611ff6ffab89704d86de4affa6cd024be3bd79658561fd544c_ppc64le as a component of Red Hat build of Keycloak 22", "product_id": "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:88f657f1f805ec611ff6ffab89704d86de4affa6cd024be3bd79658561fd544c_ppc64le" }, "product_reference": "rhbk/keycloak-rhel9@sha256:88f657f1f805ec611ff6ffab89704d86de4affa6cd024be3bd79658561fd544c_ppc64le", "relates_to_product_reference": "9Base-RHBK-22" }, { "category": "default_component_of", "full_product_name": { "name": "rhbk/keycloak-rhel9@sha256:c2c04c0b330cf4e13b6e22377e20cfed6648bfabaca8d9b30ed0cea730e7b7bf_s390x as a component of Red Hat build of Keycloak 22", "product_id": "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:c2c04c0b330cf4e13b6e22377e20cfed6648bfabaca8d9b30ed0cea730e7b7bf_s390x" }, "product_reference": "rhbk/keycloak-rhel9@sha256:c2c04c0b330cf4e13b6e22377e20cfed6648bfabaca8d9b30ed0cea730e7b7bf_s390x", "relates_to_product_reference": "9Base-RHBK-22" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 9", "product_id": "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.noarch" }, "product_reference": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "relates_to_product_reference": "9Base-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.src as a component of Red Hat Single Sign-On 7.6 for RHEL 9", "product_id": "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.src" }, "product_reference": "rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.src", "relates_to_product_reference": "9Base-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 9", "product_id": "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch" }, "product_reference": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "relates_to_product_reference": "9Base-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src as a component of Red Hat Single Sign-On 7.6 for RHEL 9", "product_id": "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src" }, "product_reference": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src", "relates_to_product_reference": "9Base-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el9sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 9", "product_id": "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el9sso.noarch" }, "product_reference": "rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "relates_to_product_reference": "9Base-RHSSO-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 9", "product_id": "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch" }, "product_reference": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "relates_to_product_reference": "9Base-RHSSO-7.6" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Pontus Hanssen" ], "organization": "Pontus.Hanssen@omegapoint.se" } ], "cve": "CVE-2023-6927", "cwe": { "id": "CWE-601", "name": "URL Redirection to Untrusted Site ('Open Redirect')" }, "discovery_date": "2023-12-18T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-RHOSE-Middleware:rh-sso-7/sso7-rhel8-operator-bundle@sha256:438375181ff28d5a61510a07f6e16d11944ebd6cc0a20961e06f662db3a16b1c_amd64", "9Base-RHBK-22:rhbk/keycloak-operator-bundle@sha256:47323bf5e0d1ec70bfec6d7dd476d1076d879d26cc166af451579e79a56046ec_amd64", "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:32817f8250713ae02ef6a1c6837298032ca49b27ff4af3c35c9bb763ad47ba75_s390x", "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:b24d774edf776b6514935c8a6dc4822891039311f76b104300348418ffda90cc_amd64", "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:bb21253f5563ba154c9dbd28560443a5d747211232c70645f4aa61f8e3f30bdf_ppc64le" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2255027" } ], "notes": [ { "category": "description", "text": "A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode \"form_post.jwt\" which could be used to bypass the security patch implemented to address CVE-2023-6134.", "title": "Vulnerability description" }, { "category": "summary", "text": "keycloak: open redirect via \"form_post.jwt\" JARM response mode", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat rates this as a moderate, following the same case for CVE-2023-6134, but with another response mode with JSON Web Token.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.src", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src", "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1f39a66794485f27da60afe31e8c7f5db5ece4bcf5a457ee7bad4a72ee70ce2e_amd64", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:7b10d4158944fd6c65f16c8b8cd57fb45c7a8c2cc0528bcce127218368ba41c3_s390x", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:b145d1c7d0939d5b44234e2a9fbe7d0aba7b579e4aaf2c4977f8fde6aa97bff2_ppc64le", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.src", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src", "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:7a4e96d7b7b1d25bcc5ce00ea6c5d8d609e9c3368b60972c3995011565ffe5c8_amd64", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:88f657f1f805ec611ff6ffab89704d86de4affa6cd024be3bd79658561fd544c_ppc64le", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:c2c04c0b330cf4e13b6e22377e20cfed6648bfabaca8d9b30ed0cea730e7b7bf_s390x", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.src", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src", "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "Red Hat Single Sign-On 7", "Red Hat build of Keycloak 22.0.8", "Single Sign-On 7.6.6" ], "known_not_affected": [ "8Base-RHOSE-Middleware:rh-sso-7/sso7-rhel8-operator-bundle@sha256:438375181ff28d5a61510a07f6e16d11944ebd6cc0a20961e06f662db3a16b1c_amd64", "9Base-RHBK-22:rhbk/keycloak-operator-bundle@sha256:47323bf5e0d1ec70bfec6d7dd476d1076d879d26cc166af451579e79a56046ec_amd64", "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:32817f8250713ae02ef6a1c6837298032ca49b27ff4af3c35c9bb763ad47ba75_s390x", "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:b24d774edf776b6514935c8a6dc4822891039311f76b104300348418ffda90cc_amd64", "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:bb21253f5563ba154c9dbd28560443a5d747211232c70645f4aa61f8e3f30bdf_ppc64le" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-6927" }, { "category": "external", "summary": "RHBZ#2255027", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255027" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-6927", "url": "https://www.cve.org/CVERecord?id=CVE-2023-6927" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-6927", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6927" } ], "release_date": "2023-12-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2024-01-09T16:09:13+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.src", "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el7sso.noarch" ], "url": "https://access.redhat.com/errata/RHSA-2024:0094" }, { "category": "vendor_fix", "date": "2024-02-13T16:55:55+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src", "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch" ], "url": "https://access.redhat.com/errata/RHSA-2024:0798" }, { "category": "vendor_fix", "date": "2024-02-13T16:54:08+00:00", "details": "To update to the latest Red Hat Single Sign-On 7.6.7 for OpenShift\nimage, Follow these steps to pull in the content:\n\n1. On your main hosts, ensure you are logged into the CLI as a\ncluster administrator or user with project administrator access\nto the global \"openshift\" project. For example:\n\n$ oc login -u system:admin\n\n2. Update the core set of Red Hat Single Sign-On resources for OpenShift\nin the \"openshift\" project by running the following commands:\n\n$ for resource in sso76-image-stream.json \\\nsso76-https.json \\\nsso76-mysql.json \\\nsso76-mysql-persistent.json \\\nsso76-postgresql.json \\\nsso76-postgresql-persistent.json \\\nsso76-x509-https.json \\\nsso76-x509-mysql-persistent.json \\\nsso76-x509-postgresql-persistent.json\ndo\noc replace -n openshift --force -f \\\nhttps://raw.githubusercontent.com/jboss-container-images/redhat-sso-7-openshift-image/v7.6.7.GA/templates/${resource}\ndone\n\n3. Install the Red Hat Single Sign-On 7.6.7 for OpenShift streams in the\n\"openshift\" project by running the following commands:\n\n$ oc -n openshift import-image redhat-sso76-openshift:1.0", "product_ids": [ "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le" ], "url": "https://access.redhat.com/errata/RHSA-2024:0801" }, { "category": "vendor_fix", "date": "2024-01-09T17:04:02+00:00", "details": "To update to the latest Red Hat Single Sign-On 7.6.6 for OpenShift image, follow these steps to pull in the content:\n\n1. On your main hosts, ensure you are logged into the CLI as a cluster administrator or user with project administrator access to the global \"openshift\" project. For example:\n\n$ oc login -u system:admin\n\n2. Update the core set of Red Hat Single Sign-On resources for OpenShift in the \"openshift\" project by running the following commands:\n\n$ for resource in sso76-image-stream.json \\\nsso76-https.json \\\nsso76-mysql.json \\\nsso76-mysql-persistent.json \\\nsso76-postgresql.json \\\nsso76-postgresql-persistent.json \\\nsso76-x509-https.json \\\nsso76-x509-mysql-persistent.json \\\nsso76-x509-postgresql-persistent.json\ndo\noc replace -n openshift --force -f \\\nhttps://raw.githubusercontent.com/jboss-container-images/redhat-sso-7-openshift-image/v7.6.6.GA/templates/${resource}\ndone\n\n3. Install the Red Hat Single Sign-On 7.6.6 for OpenShift streams in the \"openshift\" project by running the following command:\n\n$ oc -n openshift import-image redhat-sso76-openshift:1.0", "product_ids": [ "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1f39a66794485f27da60afe31e8c7f5db5ece4bcf5a457ee7bad4a72ee70ce2e_amd64", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:7b10d4158944fd6c65f16c8b8cd57fb45c7a8c2cc0528bcce127218368ba41c3_s390x", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:b145d1c7d0939d5b44234e2a9fbe7d0aba7b579e4aaf2c4977f8fde6aa97bff2_ppc64le" ], "url": "https://access.redhat.com/errata/RHSA-2024:0097" }, { "category": "vendor_fix", "date": "2024-01-09T16:08:58+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.src", "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el8sso.noarch" ], "url": "https://access.redhat.com/errata/RHSA-2024:0095" }, { "category": "vendor_fix", "date": "2024-02-13T16:55:12+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src", "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch" ], "url": "https://access.redhat.com/errata/RHSA-2024:0799" }, { "category": "vendor_fix", "date": "2024-01-09T17:36:23+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:7a4e96d7b7b1d25bcc5ce00ea6c5d8d609e9c3368b60972c3995011565ffe5c8_amd64", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:88f657f1f805ec611ff6ffab89704d86de4affa6cd024be3bd79658561fd544c_ppc64le", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:c2c04c0b330cf4e13b6e22377e20cfed6648bfabaca8d9b30ed0cea730e7b7bf_s390x" ], "url": "https://access.redhat.com/errata/RHSA-2024:0100" }, { "category": "vendor_fix", "date": "2024-01-09T16:09:24+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.src", "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el9sso.noarch" ], "url": "https://access.redhat.com/errata/RHSA-2024:0096" }, { "category": "vendor_fix", "date": "2024-02-13T16:55:27+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src", "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch" ], "url": "https://access.redhat.com/errata/RHSA-2024:0800" }, { "category": "vendor_fix", "date": "2024-02-13T17:07:54+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).", "product_ids": [ "Red Hat Single Sign-On 7" ], "url": "https://access.redhat.com/errata/RHSA-2024:0804" }, { "category": "vendor_fix", "date": "2024-01-09T16:42:16+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nFor more details see:\nhttps://access.redhat.com/documentation/en-us/red_hat_build_of_keycloak/22.0/html-single/migration_guide/", "product_ids": [ "Red Hat build of Keycloak 22.0.8" ], "url": "https://access.redhat.com/errata/RHSA-2024:0101" }, { "category": "vendor_fix", "date": "2024-01-09T16:08:48+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "Single Sign-On 7.6.6" ], "url": "https://access.redhat.com/errata/RHSA-2024:0098" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.src", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src", "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1f39a66794485f27da60afe31e8c7f5db5ece4bcf5a457ee7bad4a72ee70ce2e_amd64", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:7b10d4158944fd6c65f16c8b8cd57fb45c7a8c2cc0528bcce127218368ba41c3_s390x", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:b145d1c7d0939d5b44234e2a9fbe7d0aba7b579e4aaf2c4977f8fde6aa97bff2_ppc64le", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.src", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src", "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:7a4e96d7b7b1d25bcc5ce00ea6c5d8d609e9c3368b60972c3995011565ffe5c8_amd64", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:88f657f1f805ec611ff6ffab89704d86de4affa6cd024be3bd79658561fd544c_ppc64le", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:c2c04c0b330cf4e13b6e22377e20cfed6648bfabaca8d9b30ed0cea730e7b7bf_s390x", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.src", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src", "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "Red Hat Single Sign-On 7", "Red Hat build of Keycloak 22.0.8", "Single Sign-On 7.6.6" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.src", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src", "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "8Base-RHOSE-Middleware:rh-sso-7/sso7-rhel8-operator-bundle@sha256:438375181ff28d5a61510a07f6e16d11944ebd6cc0a20961e06f662db3a16b1c_amd64", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1f39a66794485f27da60afe31e8c7f5db5ece4bcf5a457ee7bad4a72ee70ce2e_amd64", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:7b10d4158944fd6c65f16c8b8cd57fb45c7a8c2cc0528bcce127218368ba41c3_s390x", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:b145d1c7d0939d5b44234e2a9fbe7d0aba7b579e4aaf2c4977f8fde6aa97bff2_ppc64le", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.src", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src", "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "9Base-RHBK-22:rhbk/keycloak-operator-bundle@sha256:47323bf5e0d1ec70bfec6d7dd476d1076d879d26cc166af451579e79a56046ec_amd64", "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:32817f8250713ae02ef6a1c6837298032ca49b27ff4af3c35c9bb763ad47ba75_s390x", "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:b24d774edf776b6514935c8a6dc4822891039311f76b104300348418ffda90cc_amd64", "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:bb21253f5563ba154c9dbd28560443a5d747211232c70645f4aa61f8e3f30bdf_ppc64le", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:7a4e96d7b7b1d25bcc5ce00ea6c5d8d609e9c3368b60972c3995011565ffe5c8_amd64", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:88f657f1f805ec611ff6ffab89704d86de4affa6cd024be3bd79658561fd544c_ppc64le", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:c2c04c0b330cf4e13b6e22377e20cfed6648bfabaca8d9b30ed0cea730e7b7bf_s390x", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.src", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src", "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "Red Hat Single Sign-On 7", "Red Hat build of Keycloak 22.0.8", "Single Sign-On 7.6.6" ] } ], "threats": [ { "category": "impact", "details": "Moderate", "product_ids": [ "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el7sso.src", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src", "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el7sso.noarch", "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch", "8Base-RHOSE-Middleware:rh-sso-7/sso7-rhel8-operator-bundle@sha256:438375181ff28d5a61510a07f6e16d11944ebd6cc0a20961e06f662db3a16b1c_amd64", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1f39a66794485f27da60afe31e8c7f5db5ece4bcf5a457ee7bad4a72ee70ce2e_amd64", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:7b10d4158944fd6c65f16c8b8cd57fb45c7a8c2cc0528bcce127218368ba41c3_s390x", "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:b145d1c7d0939d5b44234e2a9fbe7d0aba7b579e4aaf2c4977f8fde6aa97bff2_ppc64le", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el8sso.src", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src", "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el8sso.noarch", "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch", "9Base-RHBK-22:rhbk/keycloak-operator-bundle@sha256:47323bf5e0d1ec70bfec6d7dd476d1076d879d26cc166af451579e79a56046ec_amd64", "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:32817f8250713ae02ef6a1c6837298032ca49b27ff4af3c35c9bb763ad47ba75_s390x", "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:b24d774edf776b6514935c8a6dc4822891039311f76b104300348418ffda90cc_amd64", "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:bb21253f5563ba154c9dbd28560443a5d747211232c70645f4aa61f8e3f30bdf_ppc64le", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:7a4e96d7b7b1d25bcc5ce00ea6c5d8d609e9c3368b60972c3995011565ffe5c8_amd64", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:88f657f1f805ec611ff6ffab89704d86de4affa6cd024be3bd79658561fd544c_ppc64le", "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:c2c04c0b330cf4e13b6e22377e20cfed6648bfabaca8d9b30ed0cea730e7b7bf_s390x", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-3.redhat_00001.1.el9sso.src", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src", "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-3.redhat_00001.1.el9sso.noarch", "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch", "Red Hat Single Sign-On 7", "Red Hat build of Keycloak 22.0.8", "Single Sign-On 7.6.6" ] } ], "title": "keycloak: open redirect via \"form_post.jwt\" JARM response mode" } ] }