7.5

CVE-2024-4540

Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie

Exposure of sensitive information in Pushed Authorization Requests (PAR)

A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests (PAR). Client-provided parameters were found to be included in plain text in the KC_RESTART cookie returned by the authorization server's HTTP response to a `request_uri` authorization request, possibly leading to an information disclosure vulnerability.
Mögliche Gegenmaßnahme
Keycloak Server: Install latest version
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Collection URLhttps://github.com/keycloak/keycloak
≫
Paket keycloak
Version d5e82356f90893ca3b308a7e10020103e402369a
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Build of Keycloak
Default Statusunaffected
HerstellerRed Hat
≫
Produkt Red Hat Build of Keycloak
Default Statusunaffected
HerstellerRed Hat
≫
Produkt Red Hat build of Keycloak 22
Default Statusaffected
Version 22.0.11-2
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat build of Keycloak 22
Default Statusaffected
Version 22-15
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat build of Keycloak 22
Default Statusaffected
Version 22-18
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat build of Keycloak 24
Default Statusaffected
Version 24.0.5-2
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat build of Keycloak 24
Default Statusaffected
Version 24-10
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat build of Keycloak 24
Default Statusaffected
Version 24-10
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Single Sign-On 7
Default Statusunaffected
HerstellerRed Hat
≫
Produkt Red Hat Single Sign-On 7.6 for RHEL 7
Default Statusaffected
Version 0:18.0.14-1.redhat_00001.1.el7sso
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Single Sign-On 7.6 for RHEL 8
Default Statusaffected
Version 0:18.0.14-1.redhat_00001.1.el8sso
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Single Sign-On 7.6 for RHEL 9
Default Statusaffected
Version 0:18.0.14-1.redhat_00001.1.el9sso
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt RHEL-8 based Middleware Containers
Default Statusaffected
Version 7.6-49
Version < *
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Weitere Schwachstelleninformationen
SystemKeycloak
≫
Produkt Keycloak Server
Version < 24.0.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.55% 0.416
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
RedHat 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-312 Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

https://bugzilla.redhat.com/show_bug.cgi?id=2279303
https://access.redhat.com/errata/RHSA-2024:3572
https://access.redhat.com/errata/RHSA-2024:3575
https://access.redhat.com/errata/RHSA-2024:3566
https://access.redhat.com/errata/RHSA-2024:3567
https://access.redhat.com/errata/RHSA-2024:3568
https://access.redhat.com/errata/RHSA-2024:3570
https://access.redhat.com/errata/RHSA-2024:3573
https://access.redhat.com/errata/RHSA-2024:3574
https://access.redhat.com/errata/RHSA-2024:3576
https://access.redhat.com/security/cve/CVE-2024-4540
https://github.com/keycloak/keycloak/security/advisories/GHSA-69fp-7c8p-crjr
Third Party Advisory