En bref
- CVE-2022-1466 est une vulnérabilité MOYENNE (CVSS 6.5) touchant org.keycloak:keycloak-core, keycloak (redhat), single sign-on (redhat).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.1%, plus élevée que 65.8% des vulnérabilités.
- Correctif : mettre à jour vers 17.0.1 ou plus récent.
Description
Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.
NVD description
Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.
Autres vulnérabilités de org.keycloak:keycloak-core
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free