{"id":"CVE-2024-1249","revision":"6f38c183bdca4dc585eba73612f9d759","records":[{"revision":"6f38c183bdca4dc585eba73612f9d759","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-1249","aliases":[],"title":"Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos","description":"A flaw was found in Keycloak's OIDC component in the \"checkLoginIframe,\" which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origin validation for incoming messages.","state":0,"publishedAt":"2024-04-17T13:22:48.335+00:00","modifiedAt":"2026-09-08T19:33:53.067+00:00","affected":[{"ecosystem":"https://github.com/keycloak/keycloak","name":"keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"versions\": [\n {\n \"status\": \"affected\",\n \"version\": \"21.1.0\",\n \"lessThan\": \"22.0.10\",\n \"versionType\": \"semver\"\n },\n {\n \"status\": \"affected\",\n \"version\": \"23.0.0\",\n \"lessThan\": \"24.0.3\",\n \"versionType\": \"semver\"\n }\n ],\n \"packageName\": \"keycloak\",\n \"collectionURL\": \"https://github.com/keycloak/keycloak\",\n \"defaultStatus\": \"unaffected\"\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat AMQ Broker 7\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"defaultStatus\": \"unaffected\",\n \"packageName\": \"keycloak\",\n \"cpes\": [\n \"cpe:/a:redhat:amq_broker:7.12\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhbk/keycloak-operator-bundle","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat build of Keycloak 22\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhbk/keycloak-operator-bundle\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"22.0.10-1\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:build_keycloak:22::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhbk/keycloak-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat build of Keycloak 22\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhbk/keycloak-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"22-13\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:build_keycloak:22::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhbk/keycloak-rhel9-operator","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat build of Keycloak 22\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhbk/keycloak-rhel9-operator\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"22-16\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:build_keycloak:22::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat build of Keycloak 22.0.10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"defaultStatus\": \"unaffected\",\n \"packageName\": \"keycloak\",\n \"cpes\": [\n \"cpe:/a:redhat:build_keycloak:22\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rh-sso7-keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Single Sign-On 7.6 for RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rh-sso7-keycloak\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:18.0.13-1.redhat_00001.1.el7sso\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:red_hat_single_sign_on:7.6::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rh-sso7-keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Single Sign-On 7.6 for RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rh-sso7-keycloak\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:18.0.13-1.redhat_00001.1.el8sso\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:red_hat_single_sign_on:7.6::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rh-sso7-keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Single Sign-On 7.6 for RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rh-sso7-keycloak\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:18.0.13-1.redhat_00001.1.el9sso\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:red_hat_single_sign_on:7.6::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rh-sso-7/sso76-openshift-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"RHEL-8 based Middleware Containers\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rh-sso-7/sso76-openshift-rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"7.6-46\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhosemc:1.0::el8\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift-serverless-1/logic-data-index-ephemeral-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"RHOSS-1.33-RHEL-8\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift-serverless-1/logic-data-index-ephemeral-rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1.33.0-5\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift_serverless:1.33::el8\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift-serverless-1/logic-data-index-postgresql-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"RHOSS-1.33-RHEL-8\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift-serverless-1/logic-data-index-postgresql-rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1.33.0-5\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift_serverless:1.33::el8\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift-serverless-1/logic-jobs-service-ephemeral-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"RHOSS-1.33-RHEL-8\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift-serverless-1/logic-jobs-service-ephemeral-rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1.33.0-5\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift_serverless:1.33::el8\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift-serverless-1/logic-jobs-service-postgresql-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"RHOSS-1.33-RHEL-8\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift-serverless-1/logic-jobs-service-postgresql-rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1.33.0-5\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift_serverless:1.33::el8\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"RHOSS-1.33-RHEL-8\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1.33.0-5\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift_serverless:1.33::el8\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift-serverless-1/logic-operator-bundle","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"RHOSS-1.33-RHEL-8\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift-serverless-1/logic-operator-bundle\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1.33.0-5\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift_serverless:1.33::el8\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift-serverless-1/logic-rhel8-operator","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"RHOSS-1.33-RHEL-8\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift-serverless-1/logic-rhel8-operator\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1.33.0-3\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift_serverless:1.33::el8\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift-serverless-1/logic-swf-builder-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"RHOSS-1.33-RHEL-8\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift-serverless-1/logic-swf-builder-rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1.33.0-5\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift_serverless:1.33::el8\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"openshift-serverless-1/logic-swf-devmode-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"RHOSS-1.33-RHEL-8\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"openshift-serverless-1/logic-swf-devmode-rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1.33.0-5\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:openshift_serverless:1.33::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rh-sso7-keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"RHSSO 7.6.8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"defaultStatus\": \"unaffected\",\n \"packageName\": \"rh-sso7-keycloak\",\n \"cpes\": [\n \"cpe:/a:redhat:red_hat_single_sign_on:7.6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"mta/mta-ui-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Migration Toolkit for Applications 6\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"mta/mta-ui-rhel9\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:migration_toolkit_applications:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"mta/mta-ui-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Migration Toolkit for Applications 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"mta/mta-ui-rhel9\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:migration_toolkit_applications:7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat build of Apicurio Registry 2\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"keycloak\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:service_registry:2\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Data Grid 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"keycloak\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_data_grid:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Decision Manager 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"keycloak\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_brms_platform:7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhdh/rhdh-hub-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Developer Hub\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rhdh/rhdh-hub-rhel9\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:rhdh:1\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Fuse 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"keycloak\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_fuse:7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Data Grid 7\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"keycloak\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_data_grid:7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 6\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"keycloak\",\n \"defaultStatus\": \"unknown\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"keycloak-adapter-eap6","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 6\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"keycloak-adapter-eap6\",\n \"defaultStatus\": \"unknown\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"keycloak-adapter-sso7_2-eap6","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 6\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"keycloak-adapter-sso7_2-eap6\",\n \"defaultStatus\": \"unknown\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"keycloak-adapter-sso7_3-eap6","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 6\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"keycloak-adapter-sso7_3-eap6\",\n \"defaultStatus\": \"unknown\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"keycloak-adapter-sso7_4-eap6","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 6\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"keycloak-adapter-sso7_4-eap6\",\n \"defaultStatus\": \"unknown\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"keycloak-adapter-sso7_5-eap6","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 6\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"keycloak-adapter-sso7_5-eap6\",\n \"defaultStatus\": \"unknown\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"org.keycloak-keycloak-parent","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 6\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"org.keycloak-keycloak-parent\",\n \"defaultStatus\": \"unknown\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"rh-sso7-keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 6\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"rh-sso7-keycloak\",\n \"defaultStatus\": \"unknown\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"keycloak-core","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"keycloak-core\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform:7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"keycloak-core","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 8\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"keycloak-core\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"keycloak\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:jbosseapxp\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Process Automation 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"keycloak\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_bpms_platform:7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"keycloak","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"streams for Apache Kafka\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"keycloak\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:amq_streams:1\"\n ]\n }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","score":7.4,"severity":"HIGH"}],"references":["https://access.redhat.com/errata/RHSA-2024:1860","https://access.redhat.com/errata/RHSA-2024:1861","https://access.redhat.com/errata/RHSA-2024:1862","https://access.redhat.com/errata/RHSA-2024:1864","https://access.redhat.com/errata/RHSA-2024:1866","https://access.redhat.com/errata/RHSA-2024:1867","https://access.redhat.com/errata/RHSA-2024:1868","https://access.redhat.com/errata/RHSA-2024:2945","https://access.redhat.com/errata/RHSA-2024:4057","https://access.redhat.com/security/cve/CVE-2024-1249","https://bugzilla.redhat.com/show_bug.cgi?id=2262918"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-1249","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-1249","identifiers":["CVE-2024-1249"]},"retained":false,"historicalAffected":[]}],"coverage":[]}