Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-1709 | 9.4 | A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perfo | 2026-06-27 05:16:42 | 2026-02-06 20:16:09 |
| CVE-2026-47633 | 7.5 | Exposure of sensitive information to an unauthorized actor in Cost Management Interactive Experiences allows an unauthorized attacker to disclose information over a network. | 2026-06-26 18:54:36 | 2026-06-18 22:16:31 |
| CVE-2023-40548 | 7.4 | A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, l | 2026-06-26 10:16:22 | 2024-01-29 15:15:08 |
| CVE-2023-40547 | 8.3 | A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlle | 2026-06-26 10:16:21 | 2024-01-25 16:15:07 |
| CVE-2026-9795 | 7.3 | A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. An administrator with limited client management permissions can exploit this vulnerability to assign any realm role, including highly privileged roles, to a client's scop | 2026-06-26 08:16:29 | 2026-05-28 05:16:41 |
| CVE-2026-9803 | 5.3 | A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with a malformed 'Authorization: Bearer' header to any client registration e | 2026-06-26 02:16:56 | 2026-05-28 06:16:29 |
| CVE-2026-9802 | 6.8 | A flaw was found in Keycloak. When revokeRefreshToken=true is enabled and persistent session storage is in use, a server restart can reset internal timing mechanisms. This allows a remote attacker, who has previously captured a user's refresh token, | 2026-06-26 02:16:55 | 2026-05-28 06:16:29 |
| CVE-2026-9801 | 4.9 | A flaw was found in Keycloak. A remote attacker with high privileges, such as a realm administrator configuring a malicious Lightweight Directory Access Protocol (LDAP) server or an attacker compromising an upstream LDAP server, could exploit this vu | 2026-06-26 02:16:55 | 2026-05-28 06:16:29 |
| CVE-2026-9794 | 5.3 | A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted SOAP requests to the SAML ECP (Security Assertion Markup Language Enhanced Client or Proxy) endpoint with varying client IDs. | 2026-06-26 02:16:55 | 2026-05-28 05:16:40 |
| CVE-2026-9792 | 6.5 | A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.protocol.oidc` component. When certain condition providers (client-type, client-roles, client-attributes, client-scopes) are used to enforce security restrictions, | 2026-06-26 02:16:55 | 2026-05-28 05:16:40 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: