CVE-2024-4540Published
Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie
cve-program · CVE-2024-4540
Publishedkeycloak
https://github.com/keycloak/keycloak
Original vendor version evidence · not evaluated as a NuGet range
{
"repo": "https://github.com/keycloak/keycloak",
"versions": [
{
"status": "unaffected",
"version": "d5e82356f90893ca3b308a7e10020103e402369a",
"lessThan": "*",
"versionType": "git"
}
],
"packageName": "keycloak",
"collectionURL": "https://github.com/keycloak/keycloak"
}Red Hat Build of Keycloak
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Build of Keycloak",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected",
"cpes": [
"cpe:/a:redhat:build_keycloak:22"
]
}Red Hat Build of Keycloak
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Build of Keycloak",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected",
"cpes": [
"cpe:/a:redhat:build_keycloak:24"
]
}rhbk/keycloak-operator-bundle
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 22",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhbk/keycloak-operator-bundle",
"defaultStatus": "affected",
"versions": [
{
"version": "22.0.11-2",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:build_keycloak:22::el9"
]
}rhbk/keycloak-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 22",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhbk/keycloak-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "22-15",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:build_keycloak:22::el9"
]
}rhbk/keycloak-rhel9-operator
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 22",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhbk/keycloak-rhel9-operator",
"defaultStatus": "affected",
"versions": [
{
"version": "22-18",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:build_keycloak:22::el9"
]
}rhbk/keycloak-operator-bundle
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 24",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhbk/keycloak-operator-bundle",
"defaultStatus": "affected",
"versions": [
{
"version": "24.0.5-2",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:build_keycloak:24::el9"
]
}rhbk/keycloak-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 24",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhbk/keycloak-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "24-10",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:build_keycloak:24::el9"
]
}rhbk/keycloak-rhel9-operator
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 24",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhbk/keycloak-rhel9-operator",
"defaultStatus": "affected",
"versions": [
{
"version": "24-10",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:build_keycloak:24::el9"
]
}Red Hat Single Sign-On 7
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Single Sign-On 7",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected",
"cpes": [
"cpe:/a:redhat:red_hat_single_sign_on:7.6"
]
}rh-sso7-keycloak
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Single Sign-On 7.6 for RHEL 7",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rh-sso7-keycloak",
"defaultStatus": "affected",
"versions": [
{
"version": "0:18.0.14-1.redhat_00001.1.el7sso",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:red_hat_single_sign_on:7.6::el7"
]
}rh-sso7-keycloak
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Single Sign-On 7.6 for RHEL 8",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rh-sso7-keycloak",
"defaultStatus": "affected",
"versions": [
{
"version": "0:18.0.14-1.redhat_00001.1.el8sso",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:red_hat_single_sign_on:7.6::el8"
]
}rh-sso7-keycloak
https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat Single Sign-On 7.6 for RHEL 9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "rh-sso7-keycloak",
"defaultStatus": "affected",
"versions": [
{
"version": "0:18.0.14-1.redhat_00001.1.el9sso",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:red_hat_single_sign_on:7.6::el9"
]
}rh-sso-7/sso76-openshift-rhel8
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rh-sso-7/sso76-openshift-rhel8",
"defaultStatus": "affected",
"versions": [
{
"version": "7.6-49",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
]
}Original source record · Cite this exact observation · Complete original publisher JSON