Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-15943 | 5.5 | A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an OIDC identity provider using a masked client secret sentinel value. Due to im | 2026-08-09 14:56:07 | 2026-07-17 12:17:03 |
| CVE-2026-15945 | 4.3 | A flaw was found in the group search functionality of the Keycloak server's administrative API. When Fine-Grained Admin Permissions (FGAP) v2 is enabled, a delegated administrator can bypass access restrictions to view parent groups they are not auth | 2026-08-09 14:48:50 | 2026-07-16 18:16:42 |
| CVE-2026-18651 | 5.4 | A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials before performing the account-lock check. If the account is subsequently found to be locked, the bind is reported as fai | 2026-08-09 13:54:50 | 2026-08-03 16:16:29 |
| CVE-2026-18201 | 5.5 | Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discovered where an administrator with permission to manage identity providers could link a new provider to an organization without havi | 2026-08-07 21:05:35 | 2026-07-29 10:16:40 |
| CVE-2024-1086 | 7.8 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the | 2026-08-07 19:59:58 | 2024-01-31 13:15:10 |
| CVE-2026-18570 | 5.4 | A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component. This component is responsible for enforcing security policies during client registration and configuration in Red Hat Build of Keycloak. The is | 2026-08-07 18:35:30 | 2026-08-02 06:16:41 |
| CVE-2026-18571 | 6.6 | A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-admini | 2026-08-07 18:30:35 | 2026-08-02 06:16:42 |
| CVE-2026-18572 | 6.5 | Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during business hours). A flaw was discovered where a user can include a fake time value in t | 2026-08-07 18:24:33 | 2026-08-02 06:16:42 |
| CVE-2026-18214 | 6.8 | Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains. A flaw was found where the token exchange feature, which allows swapping a Google token for a Keycloak token, does | 2026-08-07 18:19:27 | 2026-07-31 08:16:27 |
| CVE-2026-18215 | 6.8 | Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization (tenant). A flaw was discovered where this restriction is ignored when using the token exchange feature. This means an attacker w | 2026-08-07 18:11:31 | 2026-07-31 08:16:27 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: