VDB
BDU:2023-05657
BDU:2023-05657
PUBLISHED
CVSS 3.5 LOW
Record from circl · Published September 14, 2023
Risk scores
CVSS 3.1
3.5
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | RHEL-8 based Middleware Containers | 7.6-24 |
| Red Hat | Red Hat Single Sign-On 7 | |
| Red Hat Inc. | Red Hat Single Sign-On, Red Hat Enterprise Linux, Keycloak | |
| Red Hat | Red Hat Single Sign-On 7.6 for RHEL 9 | 0:18.0.8-1.redhat_00001.1.el9sso |
| Red Hat | Red Hat Single Sign-On 7.6 for RHEL 7 | 0:18.0.8-1.redhat_00001.1.el7sso |
| Red Hat | Red Hat Single Sign-On 7.6 for RHEL 8 | 0:18.0.8-1.redhat_00001.1.el8sso |
Timeline
- Sep 14, 2023 CVE Published
- Dec 21, 2023 PoC Published (2 in total, the first dated here)
- Apr 27, 2026 Distribution Patch (5 in total, the first dated here)
- Apr 27, 2026 Security Advisory (5 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln BDU:2023-05657
vulnetix vdb fixes BDU:2023-05657
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/BDU%3A2023-05657/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://vuldb.com/?id.232442 url
- https://github.com/keycloak/keycloak/commit/04e6244c387a1bde86184635a0049537611e3915 advisory
- RHSA-2023:3883 vendor-advisory
- RHSA-2023:3884 vendor-advisory
- RHSA-2023:3892 vendor-advisory
- RHBZ#2196335 issue
- RHSA-2023:3885 vendor-advisory
- RHSA-2023:3888 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-2585 vdb
- https://github.com/advisories/GHSA-f5h4-wmp5-xhg6 url
- https://access.redhat.com/security/cve/cve-2023-2585 url