VDB
BDU%3A2024-08198
BDU%3A2024-08198
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Уязвимость класса XMLSignatureUtil программного средства для управления идентификацией и доступом Keycloak, позволяющая нарушителю обойти существующие ограничения безопасности и повысить свои привилегии
Risk Scores
CVSS 2.0
6.099999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Сообщество свободного программного обеспечения | Red Hat Single Sign-On, Red Hat JBoss Enterprise Application Platform, Red Hat Build of Keycloak, Keycloak |
Timeline
- Oct 18, 2024 CVE Published
- Oct 24, 2024 CVE Updated
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
References
- https://advisories.gitlab.com/pkg/maven/org.keycloak/keycloak-saml-core/CVE-2024-8698/ url
- https://access.redhat.com/errata/RHSA-2024:6878 url
- https://access.redhat.com/errata/RHSA-2024:6879 url
- https://access.redhat.com/errata/RHSA-2024:6886 url
- https://github.com/advisories/GHSA-4xx7-2cx3-x473 url
- https://vulert.com/vuln-db/CVE-2024-8698 url
- https://access.redhat.com/errata/RHSA-2024:6880 url
- https://access.redhat.com/errata/RHSA-2024:6889 url
- https://asec.ahnlab.com/en/83325/ url
- https://github.com/keycloak/keycloak/blob/main/saml-core/src/main/java/org/keycloak/saml/processing/core/util/XMLSignatureUtil.java#L415 url
- https://github.com/huydoppaz/CVE-2024-8698-POC url
- https://github.com/keycloak/keycloak/releases/tag/25.0.6 advisory
- https://github.com/keycloak/keycloak url
- https://access.redhat.com/security/cve/CVE-2024-8698 url
- https://access.redhat.com/errata/RHSA-2024:6882 url
- https://access.redhat.com/errata/RHSA-2024:6887 url
- https://access.redhat.com/errata/RHSA-2024:6888 url
- https://access.redhat.com/errata/RHSA-2024:6890 url
- https://github.com/keycloak/keycloak/issues/33116 url
- https://access.redhat.com/security/cve/cve-2024-8698 advisory