cve-2023-6134
MEDIUM CVSS 4.6 csaf_redhat
Description
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Timeline
- Published
- 2023-11-14 00:00 UTC
- Last Modified
- 2026-08-04
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright © Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-6134.json"
}
],
"title": "keycloak: reflected XSS via wildcard in OIDC redirect_uri",
"tracking": {
"current_release_date": "2026-08-04T07:17:31+00:00",
"generator": {
"date": "2026-08-04T07:17:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "CVE-2023-6134",
"initial_release_date": "2023-11-14T00:00:00+00:00",
"revision_history": [
{
"date": "2023-11-14T00:00:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-04T07:10:19+00:00",
"number": "2",
"summary": "Current version"
},
{
"date": "2026-08-04T07:17:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Single Sign-On 7.6 for RHEL 9",
"product": {
"name": "Red Hat Single Sign-On 7.6 for RHEL 9",
"product_id": "9Base-RHSSO-7.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7.6::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Single Sign-On 7",
"product": {
"name": "Red Hat Single Sign-On 7",
"product_id": "Red Hat Single Sign-On 7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7.6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Single Sign-On 7.6 for RHEL 8",
"product": {
"name": "Red Hat Single Sign-On 7.6 for RHEL 8",
"product_id": "8Base-RHSSO-7.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7.6::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Single Sign-On 7.6 for RHEL 7 Server",
"product": {
"name": "Red Hat Single Sign-On 7.6 for RHEL 7 Server",
"product_id": "7Server-RHSSO-7.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7.6::el7"
}
}
},
{
"category": "product_name",
"name": "Single Sign-On 7.6.6",
"product": {
"name": "Single Sign-On 7.6.6",
"product_id": "Single Sign-On 7.6.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7.6.6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Single Sign-On"
},
{
"branches": [
{
"category": "product_name",
"name": "Middleware Containers for OpenShift",
"product": {
"name": "Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhosemc:1.0::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Keycloak 22",
"product": {
"name": "Red Hat build of Keycloak 22",
"product_id": "9Base-RHBK-22",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:build_keycloak:22::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat build of Keycloak 22.0.7",
"product": {
"name": "Red Hat build of Keycloak 22.0.7",
"product_id": "Red Hat build of Keycloak 22.0.7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:build_keycloak:22"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Keycloak"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src",
"product": {
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src",
"product_id": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.12-1.redhat_00001.1.el9sso?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src",
"product": {
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src",
"product_id": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.12-1.redhat_00001.1.el8sso?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src",
"product": {
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src",
"product_id": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.12-1.redhat_00001.1.el7sso?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.src",
"product": {
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.src",
"product_id": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.11-2.redhat_00003.1.el9sso?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.src",
"product": {
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.src",
"product_id": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.11-2.redhat_00003.1.el8sso?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.src",
"product": {
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.src",
"product_id": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.11-2.redhat_00003.1.el7sso?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"product": {
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"product_id": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.12-1.redhat_00001.1.el9sso?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"product": {
"name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"product_id": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak-server@18.0.12-1.redhat_00001.1.el9sso?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"product": {
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"product_id": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.12-1.redhat_00001.1.el8sso?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"product": {
"name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"product_id": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak-server@18.0.12-1.redhat_00001.1.el8sso?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"product": {
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"product_id": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.12-1.redhat_00001.1.el7sso?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"product": {
"name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"product_id": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak-server@18.0.12-1.redhat_00001.1.el7sso?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"product": {
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"product_id": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.11-2.redhat_00003.1.el9sso?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"product": {
"name": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"product_id": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak-server@18.0.11-2.redhat_00003.1.el9sso?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"product": {
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"product_id": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.11-2.redhat_00003.1.el8sso?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"product": {
"name": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"product_id": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak-server@18.0.11-2.redhat_00003.1.el8sso?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"product": {
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"product_id": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak@18.0.11-2.redhat_00003.1.el7sso?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"product": {
"name": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"product_id": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-sso7-keycloak-server@18.0.11-2.redhat_00003.1.el7sso?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x",
"product": {
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x",
"product_id": "rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x",
"product_identification_helper": {
"purl": "pkg:oci/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995?arch=s390x&repository_url=registry.redhat.io/rh-sso-7/sso76-openshift-rhel8&tag=7.6-41"
}
}
},
{
"category": "product_version",
"name": "rhbk/keycloak-rhel9@sha256:ff4d7fbeb78a227d9078acb131a0762f36df194f905f5c8f1434efe073355b92_s390x",
"product": {
"name": "rhbk/keycloak-rhel9@sha256:ff4d7fbeb78a227d9078acb131a0762f36df194f905f5c8f1434efe073355b92_s390x",
"product_id": "rhbk/keycloak-rhel9@sha256:ff4d7fbeb78a227d9078acb131a0762f36df194f905f5c8f1434efe073355b92_s390x",
"product_identification_helper": {
"purl": "pkg:oci/keycloak-rhel9@sha256:ff4d7fbeb78a227d9078acb131a0762f36df194f905f5c8f1434efe073355b92?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=22-6"
}
}
},
{
"category": "product_version",
"name": "rhbk/keycloak-rhel9-operator@sha256:96bdf3a2d1491a1cf26c0f8e46ff0b124d27f8ae67181b6e52faffc5cafd8837_s390x",
"product": {
"name": "rhbk/keycloak-rhel9-operator@sha256:96bdf3a2d1491a1cf26c0f8e46ff0b124d27f8ae67181b6e52faffc5cafd8837_s390x",
"product_id": "rhbk/keycloak-rhel9-operator@sha256:96bdf3a2d1491a1cf26c0f8e46ff0b124d27f8ae67181b6e52faffc5cafd8837_s390x",
"product_identification_helper": {
"purl": "pkg:oci/keycloak-rhel9-operator@sha256:96bdf3a2d1491a1cf26c0f8e46ff0b124d27f8ae67181b6e52faffc5cafd8837?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=22-9"
}
}
},
{
"category": "product_version",
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:05c8f187d183582102855c12ac856f361cc6a0bbd792675799bfc319694bc662_s390x",
"product": {
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:05c8f187d183582102855c12ac856f361cc6a0bbd792675799bfc319694bc662_s390x",
"product_id": "rh-sso-7/sso76-openshift-rhel8@sha256:05c8f187d183582102855c12ac856f361cc6a0bbd792675799bfc319694bc662_s390x",
"product_identification_helper": {
"purl": "pkg:oci/sso76-openshift-rhel8@sha256:05c8f187d183582102855c12ac856f361cc6a0bbd792675799bfc319694bc662?arch=s390x&repository_url=registry.redhat.io/rh-sso-7/sso76-openshift-rhel8&tag=7.6-38"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64",
"product": {
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64",
"product_id": "rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64",
"product_identification_helper": {
"purl": "pkg:oci/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab?arch=amd64&repository_url=registry.redhat.io/rh-sso-7/sso76-openshift-rhel8&tag=7.6-41"
}
}
},
{
"category": "product_version",
"name": "rhbk/keycloak-rhel9@sha256:ca08c57756107d6701bdc10590466a7ca7a42bf1bc7883e9df3d4b6b04800343_amd64",
"product": {
"name": "rhbk/keycloak-rhel9@sha256:ca08c57756107d6701bdc10590466a7ca7a42bf1bc7883e9df3d4b6b04800343_amd64",
"product_id": "rhbk/keycloak-rhel9@sha256:ca08c57756107d6701bdc10590466a7ca7a42bf1bc7883e9df3d4b6b04800343_amd64",
"product_identification_helper": {
"purl": "pkg:oci/keycloak-rhel9@sha256:ca08c57756107d6701bdc10590466a7ca7a42bf1bc7883e9df3d4b6b04800343?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=22-6"
}
}
},
{
"category": "product_version",
"name": "rhbk/keycloak-operator-bundle@sha256:95af3ba537cf925f0359d54c7cd6d1dc360c9f109dcdd79322e9eb981c9b1ec6_amd64",
"product": {
"name": "rhbk/keycloak-operator-bundle@sha256:95af3ba537cf925f0359d54c7cd6d1dc360c9f109dcdd79322e9eb981c9b1ec6_amd64",
"product_id": "rhbk/keycloak-operator-bundle@sha256:95af3ba537cf925f0359d54c7cd6d1dc360c9f109dcdd79322e9eb981c9b1ec6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/keycloak-operator-bundle@sha256:95af3ba537cf925f0359d54c7cd6d1dc360c9f109dcdd79322e9eb981c9b1ec6?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-operator-bundle&tag=22.0.7-1"
}
}
},
{
"category": "product_version",
"name": "rhbk/keycloak-rhel9-operator@sha256:c27cc8e7d7afc40125624c250be2cbefc9589645df6890bef6b601bbcfd0a9d7_amd64",
"product": {
"name": "rhbk/keycloak-rhel9-operator@sha256:c27cc8e7d7afc40125624c250be2cbefc9589645df6890bef6b601bbcfd0a9d7_amd64",
"product_id": "rhbk/keycloak-rhel9-operator@sha256:c27cc8e7d7afc40125624c250be2cbefc9589645df6890bef6b601bbcfd0a9d7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/keycloak-rhel9-operator@sha256:c27cc8e7d7afc40125624c250be2cbefc9589645df6890bef6b601bbcfd0a9d7?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=22-9"
}
}
},
{
"category": "product_version",
"name": "rh-sso-7/sso7-rhel8-operator-bundle@sha256:4cbf1a09c7207f9f1ffc918b5e8a4adaa89938befc6d75040b3ddd505ab14f6c_amd64",
"product": {
"name": "rh-sso-7/sso7-rhel8-operator-bundle@sha256:4cbf1a09c7207f9f1ffc918b5e8a4adaa89938befc6d75040b3ddd505ab14f6c_amd64",
"product_id": "rh-sso-7/sso7-rhel8-operator-bundle@sha256:4cbf1a09c7207f9f1ffc918b5e8a4adaa89938befc6d75040b3ddd505ab14f6c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/sso7-rhel8-operator-bundle@sha256:4cbf1a09c7207f9f1ffc918b5e8a4adaa89938befc6d75040b3ddd505ab14f6c?arch=amd64&repository_url=registry.redhat.io/rh-sso-7/sso7-rhel8-operator-bundle&tag=7.6.6-2"
}
}
},
{
"category": "product_version",
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:db235506ce5d840dc139a3cde4114939222df6abb0901efaaff4f9ddbc495b9b_amd64",
"product": {
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:db235506ce5d840dc139a3cde4114939222df6abb0901efaaff4f9ddbc495b9b_amd64",
"product_id": "rh-sso-7/sso76-openshift-rhel8@sha256:db235506ce5d840dc139a3cde4114939222df6abb0901efaaff4f9ddbc495b9b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/sso76-openshift-rhel8@sha256:db235506ce5d840dc139a3cde4114939222df6abb0901efaaff4f9ddbc495b9b?arch=amd64&repository_url=registry.redhat.io/rh-sso-7/sso76-openshift-rhel8&tag=7.6-38"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le",
"product": {
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le",
"product_id": "rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d?arch=ppc64le&repository_url=registry.redhat.io/rh-sso-7/sso76-openshift-rhel8&tag=7.6-41"
}
}
},
{
"category": "product_version",
"name": "rhbk/keycloak-rhel9@sha256:cae4e2e48188b03a76a4e13e061e16cae7ee053bf32ec164ed140dce30c94cbf_ppc64le",
"product": {
"name": "rhbk/keycloak-rhel9@sha256:cae4e2e48188b03a76a4e13e061e16cae7ee053bf32ec164ed140dce30c94cbf_ppc64le",
"product_id": "rhbk/keycloak-rhel9@sha256:cae4e2e48188b03a76a4e13e061e16cae7ee053bf32ec164ed140dce30c94cbf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/keycloak-rhel9@sha256:cae4e2e48188b03a76a4e13e061e16cae7ee053bf32ec164ed140dce30c94cbf?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=22-6"
}
}
},
{
"category": "product_version",
"name": "rhbk/keycloak-rhel9-operator@sha256:b79c5a6857d87daedeb8bf90fd4df9f73a663c5dc1567a5855eeebc8776d8b04_ppc64le",
"product": {
"name": "rhbk/keycloak-rhel9-operator@sha256:b79c5a6857d87daedeb8bf90fd4df9f73a663c5dc1567a5855eeebc8776d8b04_ppc64le",
"product_id": "rhbk/keycloak-rhel9-operator@sha256:b79c5a6857d87daedeb8bf90fd4df9f73a663c5dc1567a5855eeebc8776d8b04_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/keycloak-rhel9-operator@sha256:b79c5a6857d87daedeb8bf90fd4df9f73a663c5dc1567a5855eeebc8776d8b04?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=22-9"
}
}
},
{
"category": "product_version",
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:c65934aa7883ccd9655cd1e7e47899e97470e42cc32bbe5386cc64f88fd26696_ppc64le",
"product": {
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:c65934aa7883ccd9655cd1e7e47899e97470e42cc32bbe5386cc64f88fd26696_ppc64le",
"product_id": "rh-sso-7/sso76-openshift-rhel8@sha256:c65934aa7883ccd9655cd1e7e47899e97470e42cc32bbe5386cc64f88fd26696_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/sso76-openshift-rhel8@sha256:c65934aa7883ccd9655cd1e7e47899e97470e42cc32bbe5386cc64f88fd26696?arch=ppc64le&repository_url=registry.redhat.io/rh-sso-7/sso76-openshift-rhel8&tag=7.6-38"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 7 Server",
"product_id": "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.noarch"
},
"product_reference": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"relates_to_product_reference": "7Server-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.src as a component of Red Hat Single Sign-On 7.6 for RHEL 7 Server",
"product_id": "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.src"
},
"product_reference": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.src",
"relates_to_product_reference": "7Server-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 7 Server",
"product_id": "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch"
},
"product_reference": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"relates_to_product_reference": "7Server-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src as a component of Red Hat Single Sign-On 7.6 for RHEL 7 Server",
"product_id": "7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src"
},
"product_reference": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src",
"relates_to_product_reference": "7Server-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el7sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 7 Server",
"product_id": "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el7sso.noarch"
},
"product_reference": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"relates_to_product_reference": "7Server-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 7 Server",
"product_id": "7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch"
},
"product_reference": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"relates_to_product_reference": "7Server-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso-7/sso7-rhel8-operator-bundle@sha256:4cbf1a09c7207f9f1ffc918b5e8a4adaa89938befc6d75040b3ddd505ab14f6c_amd64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso7-rhel8-operator-bundle@sha256:4cbf1a09c7207f9f1ffc918b5e8a4adaa89938befc6d75040b3ddd505ab14f6c_amd64"
},
"product_reference": "rh-sso-7/sso7-rhel8-operator-bundle@sha256:4cbf1a09c7207f9f1ffc918b5e8a4adaa89938befc6d75040b3ddd505ab14f6c_amd64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:05c8f187d183582102855c12ac856f361cc6a0bbd792675799bfc319694bc662_s390x as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:05c8f187d183582102855c12ac856f361cc6a0bbd792675799bfc319694bc662_s390x"
},
"product_reference": "rh-sso-7/sso76-openshift-rhel8@sha256:05c8f187d183582102855c12ac856f361cc6a0bbd792675799bfc319694bc662_s390x",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64"
},
"product_reference": "rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x"
},
"product_reference": "rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le"
},
"product_reference": "rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:c65934aa7883ccd9655cd1e7e47899e97470e42cc32bbe5386cc64f88fd26696_ppc64le as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:c65934aa7883ccd9655cd1e7e47899e97470e42cc32bbe5386cc64f88fd26696_ppc64le"
},
"product_reference": "rh-sso-7/sso76-openshift-rhel8@sha256:c65934aa7883ccd9655cd1e7e47899e97470e42cc32bbe5386cc64f88fd26696_ppc64le",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso-7/sso76-openshift-rhel8@sha256:db235506ce5d840dc139a3cde4114939222df6abb0901efaaff4f9ddbc495b9b_amd64 as a component of Middleware Containers for OpenShift",
"product_id": "8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:db235506ce5d840dc139a3cde4114939222df6abb0901efaaff4f9ddbc495b9b_amd64"
},
"product_reference": "rh-sso-7/sso76-openshift-rhel8@sha256:db235506ce5d840dc139a3cde4114939222df6abb0901efaaff4f9ddbc495b9b_amd64",
"relates_to_product_reference": "8Base-RHOSE-Middleware"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 8",
"product_id": "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.noarch"
},
"product_reference": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"relates_to_product_reference": "8Base-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.src as a component of Red Hat Single Sign-On 7.6 for RHEL 8",
"product_id": "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.src"
},
"product_reference": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.src",
"relates_to_product_reference": "8Base-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 8",
"product_id": "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch"
},
"product_reference": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"relates_to_product_reference": "8Base-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src as a component of Red Hat Single Sign-On 7.6 for RHEL 8",
"product_id": "8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src"
},
"product_reference": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src",
"relates_to_product_reference": "8Base-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el8sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 8",
"product_id": "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el8sso.noarch"
},
"product_reference": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"relates_to_product_reference": "8Base-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 8",
"product_id": "8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch"
},
"product_reference": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"relates_to_product_reference": "8Base-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhbk/keycloak-operator-bundle@sha256:95af3ba537cf925f0359d54c7cd6d1dc360c9f109dcdd79322e9eb981c9b1ec6_amd64 as a component of Red Hat build of Keycloak 22",
"product_id": "9Base-RHBK-22:rhbk/keycloak-operator-bundle@sha256:95af3ba537cf925f0359d54c7cd6d1dc360c9f109dcdd79322e9eb981c9b1ec6_amd64"
},
"product_reference": "rhbk/keycloak-operator-bundle@sha256:95af3ba537cf925f0359d54c7cd6d1dc360c9f109dcdd79322e9eb981c9b1ec6_amd64",
"relates_to_product_reference": "9Base-RHBK-22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhbk/keycloak-rhel9-operator@sha256:96bdf3a2d1491a1cf26c0f8e46ff0b124d27f8ae67181b6e52faffc5cafd8837_s390x as a component of Red Hat build of Keycloak 22",
"product_id": "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:96bdf3a2d1491a1cf26c0f8e46ff0b124d27f8ae67181b6e52faffc5cafd8837_s390x"
},
"product_reference": "rhbk/keycloak-rhel9-operator@sha256:96bdf3a2d1491a1cf26c0f8e46ff0b124d27f8ae67181b6e52faffc5cafd8837_s390x",
"relates_to_product_reference": "9Base-RHBK-22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhbk/keycloak-rhel9-operator@sha256:b79c5a6857d87daedeb8bf90fd4df9f73a663c5dc1567a5855eeebc8776d8b04_ppc64le as a component of Red Hat build of Keycloak 22",
"product_id": "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:b79c5a6857d87daedeb8bf90fd4df9f73a663c5dc1567a5855eeebc8776d8b04_ppc64le"
},
"product_reference": "rhbk/keycloak-rhel9-operator@sha256:b79c5a6857d87daedeb8bf90fd4df9f73a663c5dc1567a5855eeebc8776d8b04_ppc64le",
"relates_to_product_reference": "9Base-RHBK-22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhbk/keycloak-rhel9-operator@sha256:c27cc8e7d7afc40125624c250be2cbefc9589645df6890bef6b601bbcfd0a9d7_amd64 as a component of Red Hat build of Keycloak 22",
"product_id": "9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:c27cc8e7d7afc40125624c250be2cbefc9589645df6890bef6b601bbcfd0a9d7_amd64"
},
"product_reference": "rhbk/keycloak-rhel9-operator@sha256:c27cc8e7d7afc40125624c250be2cbefc9589645df6890bef6b601bbcfd0a9d7_amd64",
"relates_to_product_reference": "9Base-RHBK-22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhbk/keycloak-rhel9@sha256:ca08c57756107d6701bdc10590466a7ca7a42bf1bc7883e9df3d4b6b04800343_amd64 as a component of Red Hat build of Keycloak 22",
"product_id": "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:ca08c57756107d6701bdc10590466a7ca7a42bf1bc7883e9df3d4b6b04800343_amd64"
},
"product_reference": "rhbk/keycloak-rhel9@sha256:ca08c57756107d6701bdc10590466a7ca7a42bf1bc7883e9df3d4b6b04800343_amd64",
"relates_to_product_reference": "9Base-RHBK-22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhbk/keycloak-rhel9@sha256:cae4e2e48188b03a76a4e13e061e16cae7ee053bf32ec164ed140dce30c94cbf_ppc64le as a component of Red Hat build of Keycloak 22",
"product_id": "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:cae4e2e48188b03a76a4e13e061e16cae7ee053bf32ec164ed140dce30c94cbf_ppc64le"
},
"product_reference": "rhbk/keycloak-rhel9@sha256:cae4e2e48188b03a76a4e13e061e16cae7ee053bf32ec164ed140dce30c94cbf_ppc64le",
"relates_to_product_reference": "9Base-RHBK-22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhbk/keycloak-rhel9@sha256:ff4d7fbeb78a227d9078acb131a0762f36df194f905f5c8f1434efe073355b92_s390x as a component of Red Hat build of Keycloak 22",
"product_id": "9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:ff4d7fbeb78a227d9078acb131a0762f36df194f905f5c8f1434efe073355b92_s390x"
},
"product_reference": "rhbk/keycloak-rhel9@sha256:ff4d7fbeb78a227d9078acb131a0762f36df194f905f5c8f1434efe073355b92_s390x",
"relates_to_product_reference": "9Base-RHBK-22"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 9",
"product_id": "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.noarch"
},
"product_reference": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"relates_to_product_reference": "9Base-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.src as a component of Red Hat Single Sign-On 7.6 for RHEL 9",
"product_id": "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.src"
},
"product_reference": "rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.src",
"relates_to_product_reference": "9Base-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 9",
"product_id": "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch"
},
"product_reference": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"relates_to_product_reference": "9Base-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src as a component of Red Hat Single Sign-On 7.6 for RHEL 9",
"product_id": "9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src"
},
"product_reference": "rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src",
"relates_to_product_reference": "9Base-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el9sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 9",
"product_id": "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el9sso.noarch"
},
"product_reference": "rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"relates_to_product_reference": "9Base-RHSSO-7.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch as a component of Red Hat Single Sign-On 7.6 for RHEL 9",
"product_id": "9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch"
},
"product_reference": "rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"relates_to_product_reference": "9Base-RHSSO-7.6"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Lauritz Holtmann"
],
"organization": "https://security.lauritz-holtmann.de/"
}
],
"cve": "CVE-2023-6134",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
},
"discovery_date": "2023-11-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2249673"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the result of an incomplete fix for CVE-2020-10748.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "keycloak: reflected XSS via wildcard in OIDC redirect_uri",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.src",
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src",
"7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"8Base-RHOSE-Middleware:rh-sso-7/sso7-rhel8-operator-bundle@sha256:4cbf1a09c7207f9f1ffc918b5e8a4adaa89938befc6d75040b3ddd505ab14f6c_amd64",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:05c8f187d183582102855c12ac856f361cc6a0bbd792675799bfc319694bc662_s390x",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:c65934aa7883ccd9655cd1e7e47899e97470e42cc32bbe5386cc64f88fd26696_ppc64le",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:db235506ce5d840dc139a3cde4114939222df6abb0901efaaff4f9ddbc495b9b_amd64",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.src",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src",
"8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"9Base-RHBK-22:rhbk/keycloak-operator-bundle@sha256:95af3ba537cf925f0359d54c7cd6d1dc360c9f109dcdd79322e9eb981c9b1ec6_amd64",
"9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:96bdf3a2d1491a1cf26c0f8e46ff0b124d27f8ae67181b6e52faffc5cafd8837_s390x",
"9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:b79c5a6857d87daedeb8bf90fd4df9f73a663c5dc1567a5855eeebc8776d8b04_ppc64le",
"9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:c27cc8e7d7afc40125624c250be2cbefc9589645df6890bef6b601bbcfd0a9d7_amd64",
"9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:ca08c57756107d6701bdc10590466a7ca7a42bf1bc7883e9df3d4b6b04800343_amd64",
"9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:cae4e2e48188b03a76a4e13e061e16cae7ee053bf32ec164ed140dce30c94cbf_ppc64le",
"9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:ff4d7fbeb78a227d9078acb131a0762f36df194f905f5c8f1434efe073355b92_s390x",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.src",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src",
"9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"Red Hat Single Sign-On 7",
"Red Hat build of Keycloak 22.0.7",
"Single Sign-On 7.6.6"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-6134"
},
{
"category": "external",
"summary": "RHBZ#2249673",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2249673"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-6134",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6134"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-6134",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6134"
}
],
"release_date": "2023-11-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-12-14T19:01:36+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.src",
"7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el7sso.noarch"
],
"url": "https://access.redhat.com/errata/RHSA-2023:7854"
},
{
"category": "vendor_fix",
"date": "2024-02-13T16:55:55+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src",
"7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch"
],
"url": "https://access.redhat.com/errata/RHSA-2024:0798"
},
{
"category": "vendor_fix",
"date": "2023-12-14T19:53:20+00:00",
"details": "To update to the latest Red Hat Single Sign-On 7.6.6 for OpenShift image, follow these steps to pull in the content:\n\n1. On your main hosts, ensure you are logged into the CLI as a cluster administrator or user with project administrator access to the global \"openshift\" project. For example:\n\n$ oc login -u system:admin\n\n2. Update the core set of Red Hat Single Sign-On resources for OpenShift in the \"openshift\" project by running the following commands:\n\n$ for resource in sso76-image-stream.json \\\nsso76-https.json \\\nsso76-mysql.json \\\nsso76-mysql-persistent.json \\\nsso76-postgresql.json \\\nsso76-postgresql-persistent.json \\\nsso76-x509-https.json \\\nsso76-x509-mysql-persistent.json \\\nsso76-x509-postgresql-persistent.json\ndo\noc replace -n openshift --force -f \\\nhttps://raw.githubusercontent.com/jboss-container-images/redhat-sso-7-openshift-image/v7.6.6.GA/templates/${resource}\ndone\n\n3. Install the Red Hat Single Sign-On 7.6.6 for OpenShift streams in the \"openshift\" project by running the following command:\n\n$ oc -n openshift import-image redhat-sso76-openshift:1.0",
"product_ids": [
"8Base-RHOSE-Middleware:rh-sso-7/sso7-rhel8-operator-bundle@sha256:4cbf1a09c7207f9f1ffc918b5e8a4adaa89938befc6d75040b3ddd505ab14f6c_amd64",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:05c8f187d183582102855c12ac856f361cc6a0bbd792675799bfc319694bc662_s390x",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:c65934aa7883ccd9655cd1e7e47899e97470e42cc32bbe5386cc64f88fd26696_ppc64le",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:db235506ce5d840dc139a3cde4114939222df6abb0901efaaff4f9ddbc495b9b_amd64"
],
"url": "https://access.redhat.com/errata/RHSA-2023:7857"
},
{
"category": "vendor_fix",
"date": "2024-02-13T16:54:08+00:00",
"details": "To update to the latest Red Hat Single Sign-On 7.6.7 for OpenShift\nimage, Follow these steps to pull in the content:\n\n1. On your main hosts, ensure you are logged into the CLI as a\ncluster administrator or user with project administrator access\nto the global \"openshift\" project. For example:\n\n$ oc login -u system:admin\n\n2. Update the core set of Red Hat Single Sign-On resources for OpenShift\nin the \"openshift\" project by running the following commands:\n\n$ for resource in sso76-image-stream.json \\\nsso76-https.json \\\nsso76-mysql.json \\\nsso76-mysql-persistent.json \\\nsso76-postgresql.json \\\nsso76-postgresql-persistent.json \\\nsso76-x509-https.json \\\nsso76-x509-mysql-persistent.json \\\nsso76-x509-postgresql-persistent.json\ndo\noc replace -n openshift --force -f \\\nhttps://raw.githubusercontent.com/jboss-container-images/redhat-sso-7-openshift-image/v7.6.7.GA/templates/${resource}\ndone\n\n3. Install the Red Hat Single Sign-On 7.6.7 for OpenShift streams in the\n\"openshift\" project by running the following commands:\n\n$ oc -n openshift import-image redhat-sso76-openshift:1.0",
"product_ids": [
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le"
],
"url": "https://access.redhat.com/errata/RHSA-2024:0801"
},
{
"category": "vendor_fix",
"date": "2023-12-14T19:01:20+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.src",
"8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el8sso.noarch"
],
"url": "https://access.redhat.com/errata/RHSA-2023:7856"
},
{
"category": "vendor_fix",
"date": "2024-02-13T16:55:12+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src",
"8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch"
],
"url": "https://access.redhat.com/errata/RHSA-2024:0799"
},
{
"category": "vendor_fix",
"date": "2023-12-14T20:04:14+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHBK-22:rhbk/keycloak-operator-bundle@sha256:95af3ba537cf925f0359d54c7cd6d1dc360c9f109dcdd79322e9eb981c9b1ec6_amd64",
"9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:96bdf3a2d1491a1cf26c0f8e46ff0b124d27f8ae67181b6e52faffc5cafd8837_s390x",
"9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:b79c5a6857d87daedeb8bf90fd4df9f73a663c5dc1567a5855eeebc8776d8b04_ppc64le",
"9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:c27cc8e7d7afc40125624c250be2cbefc9589645df6890bef6b601bbcfd0a9d7_amd64",
"9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:ca08c57756107d6701bdc10590466a7ca7a42bf1bc7883e9df3d4b6b04800343_amd64",
"9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:cae4e2e48188b03a76a4e13e061e16cae7ee053bf32ec164ed140dce30c94cbf_ppc64le",
"9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:ff4d7fbeb78a227d9078acb131a0762f36df194f905f5c8f1434efe073355b92_s390x"
],
"url": "https://access.redhat.com/errata/RHSA-2023:7861"
},
{
"category": "vendor_fix",
"date": "2023-12-14T19:00:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.src",
"9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el9sso.noarch"
],
"url": "https://access.redhat.com/errata/RHSA-2023:7855"
},
{
"category": "vendor_fix",
"date": "2024-02-13T16:55:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src",
"9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch"
],
"url": "https://access.redhat.com/errata/RHSA-2024:0800"
},
{
"category": "vendor_fix",
"date": "2024-02-13T17:07:54+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat Single Sign-On 7"
],
"url": "https://access.redhat.com/errata/RHSA-2024:0804"
},
{
"category": "vendor_fix",
"date": "2023-12-14T19:16:38+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nFor more details see:\nhttps://access.redhat.com/documentation/en-us/red_hat_build_of_keycloak/22.0/html-single/migration_guide/",
"product_ids": [
"Red Hat build of Keycloak 22.0.7"
],
"url": "https://access.redhat.com/errata/RHSA-2023:7860"
},
{
"category": "vendor_fix",
"date": "2023-12-14T19:04:26+00:00",
"details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Single Sign-On 7.6.6"
],
"url": "https://access.redhat.com/errata/RHSA-2023:7858"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.src",
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src",
"7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"8Base-RHOSE-Middleware:rh-sso-7/sso7-rhel8-operator-bundle@sha256:4cbf1a09c7207f9f1ffc918b5e8a4adaa89938befc6d75040b3ddd505ab14f6c_amd64",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:05c8f187d183582102855c12ac856f361cc6a0bbd792675799bfc319694bc662_s390x",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:c65934aa7883ccd9655cd1e7e47899e97470e42cc32bbe5386cc64f88fd26696_ppc64le",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:db235506ce5d840dc139a3cde4114939222df6abb0901efaaff4f9ddbc495b9b_amd64",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.src",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src",
"8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"9Base-RHBK-22:rhbk/keycloak-operator-bundle@sha256:95af3ba537cf925f0359d54c7cd6d1dc360c9f109dcdd79322e9eb981c9b1ec6_amd64",
"9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:96bdf3a2d1491a1cf26c0f8e46ff0b124d27f8ae67181b6e52faffc5cafd8837_s390x",
"9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:b79c5a6857d87daedeb8bf90fd4df9f73a663c5dc1567a5855eeebc8776d8b04_ppc64le",
"9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:c27cc8e7d7afc40125624c250be2cbefc9589645df6890bef6b601bbcfd0a9d7_amd64",
"9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:ca08c57756107d6701bdc10590466a7ca7a42bf1bc7883e9df3d4b6b04800343_amd64",
"9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:cae4e2e48188b03a76a4e13e061e16cae7ee053bf32ec164ed140dce30c94cbf_ppc64le",
"9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:ff4d7fbeb78a227d9078acb131a0762f36df194f905f5c8f1434efe073355b92_s390x",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.src",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src",
"9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"Red Hat Single Sign-On 7",
"Red Hat build of Keycloak 22.0.7",
"Single Sign-On 7.6.6"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate",
"product_ids": [
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el7sso.src",
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"7Server-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el7sso.src",
"7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el7sso.noarch",
"7Server-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el7sso.noarch",
"8Base-RHOSE-Middleware:rh-sso-7/sso7-rhel8-operator-bundle@sha256:4cbf1a09c7207f9f1ffc918b5e8a4adaa89938befc6d75040b3ddd505ab14f6c_amd64",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:05c8f187d183582102855c12ac856f361cc6a0bbd792675799bfc319694bc662_s390x",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:1cde6dbbee3aa25be767953c45670d4c2592d61a7af776e7e0d0d1b08a1d23ab_amd64",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:23d03851f0946e0ce058bfeeb458112e752b6b0dd8ebca078dc41b8e94c8e995_s390x",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:2a21973655961ae87984bf1b76843419680fb0228fa0084c5bf8c696058bbc8d_ppc64le",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:c65934aa7883ccd9655cd1e7e47899e97470e42cc32bbe5386cc64f88fd26696_ppc64le",
"8Base-RHOSE-Middleware:rh-sso-7/sso76-openshift-rhel8@sha256:db235506ce5d840dc139a3cde4114939222df6abb0901efaaff4f9ddbc495b9b_amd64",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el8sso.src",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"8Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el8sso.src",
"8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el8sso.noarch",
"8Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el8sso.noarch",
"9Base-RHBK-22:rhbk/keycloak-operator-bundle@sha256:95af3ba537cf925f0359d54c7cd6d1dc360c9f109dcdd79322e9eb981c9b1ec6_amd64",
"9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:96bdf3a2d1491a1cf26c0f8e46ff0b124d27f8ae67181b6e52faffc5cafd8837_s390x",
"9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:b79c5a6857d87daedeb8bf90fd4df9f73a663c5dc1567a5855eeebc8776d8b04_ppc64le",
"9Base-RHBK-22:rhbk/keycloak-rhel9-operator@sha256:c27cc8e7d7afc40125624c250be2cbefc9589645df6890bef6b601bbcfd0a9d7_amd64",
"9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:ca08c57756107d6701bdc10590466a7ca7a42bf1bc7883e9df3d4b6b04800343_amd64",
"9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:cae4e2e48188b03a76a4e13e061e16cae7ee053bf32ec164ed140dce30c94cbf_ppc64le",
"9Base-RHBK-22:rhbk/keycloak-rhel9@sha256:ff4d7fbeb78a227d9078acb131a0762f36df194f905f5c8f1434efe073355b92_s390x",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.11-2.redhat_00003.1.el9sso.src",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"9Base-RHSSO-7.6:rh-sso7-keycloak-0:18.0.12-1.redhat_00001.1.el9sso.src",
"9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.11-2.redhat_00003.1.el9sso.noarch",
"9Base-RHSSO-7.6:rh-sso7-keycloak-server-0:18.0.12-1.redhat_00001.1.el9sso.noarch",
"Red Hat Single Sign-On 7",
"Red Hat build of Keycloak 22.0.7",
"Single Sign-On 7.6.6"
]
}
],
"title": "keycloak: reflected XSS via wildcard in OIDC redirect_uri"
}
]
}
Enrichment data
Aggregated bundle (all enrichments)