VDB

BDU%3A2023-08559

BDU%3A2023-08559 PUBLISHED CVSS 5.300000190734863 MEDIUM

Уязвимость механизма аутентификации WebAuthn программного средства для управления идентификацией и доступом Keycloak, позволяющая нарушителю оказать влияние на целостность защищаемой информации

Risk Scores

CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected Products

VendorProductVersions
Red HatRHEL-8 based Middleware Containers7.6.8-2
Red HatRed Hat build of Keycloak 2222-13
Red HatRed Hat build of Keycloak 2222-16
Red HatRHEL-8 based Middleware Containers7.6-18
Red HatRHSSO 7.6.8
Red HatRed Hat Single Sign-On 7
Red HatRed Hat Single Sign-On 7.6 for RHEL 80:18.0.13-1.redhat_00001.1.el8sso, 0:18.0.12-1.redhat_00001.1.el8sso
Red HatRed Hat build of Keycloak 22.0.10
Red HatRHEL-8 based Middleware Containers7.6-41, 7.6-46
Red HatRHEL-8 based Middleware Containers7.6-16
Red HatRed Hat Single Sign-On 7.6 for RHEL 90:18.0.13-1.redhat_00001.1.el9sso, 0:18.0.12-1.redhat_00001.1.el9sso
Red HatRed Hat build of Keycloak 2222.0.10-1
Red HatRed Hat Single Sign-On 7.6 for RHEL 70:18.0.12-1.redhat_00001.1.el7sso, 0:18.0.13-1.redhat_00001.1.el7sso
0, 23.0.0
Red Hat Inc.Red Hat Single Sign-On, Keycloak

Timeline

  • Dec 11, 2023 CVE Published
  • May 31, 2026 Distribution Patch
  • May 31, 2026 Distribution Patch
  • May 31, 2026 Distribution Patch
  • May 31, 2026 Distribution Patch
  • May 31, 2026 Distribution Patch
  • May 31, 2026 Distribution Patch
  • May 31, 2026 Distribution Patch
  • May 31, 2026 Distribution Patch
  • May 31, 2026 Security Advisory
  • May 31, 2026 Security Advisory
  • May 31, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›