Information disclosure in Keycloak - CVE-2024-4540
Published: June 24, 2024
Vulnerability identifier: #VU93088
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-4540
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to an error in the OAuth 2.0 Pushed Authorization Requests (PAR) implementation. Client provided parameters are included in plain text in to
the KC_RESTART cookie returned by the authorization server's HTTP
response to a request_uri authorization request. A local user with access to the system can use the cookie to gain access to sensitive information.
Affected software
Keycloak
Red Hat Single Sign-On
Dell Data Protection Central
rh-sso7-keycloak (Red Hat package)
Red Hat build of Keycloak
Red Hat Single Sign-On
Dell Data Protection Central
rh-sso7-keycloak (Red Hat package)
Red Hat build of Keycloak
How to mitigate CVE-2024-4540
Install updates from vendor's website.
Keycloak - update to 24.0.5
Dell Data Protection Central - update to 19.12.0-2
Red Hat Single Sign-On - update to 7.6.9
rh-sso7-keycloak (Red Hat package) - addressed in versions 18.0.14-1.redhat_00001.1.el7sso, 18.0.14-1.redhat_00001.1.el8sso, 18.0.14-1.redhat_00001.1.el9sso
Red Hat build of Keycloak - addressed in versions 22.0.11, 24.0.5
Dell Data Protection Central - update to 19.12.0-2
Red Hat Single Sign-On - update to 7.6.9
rh-sso7-keycloak (Red Hat package) - addressed in versions 18.0.14-1.redhat_00001.1.el7sso, 18.0.14-1.redhat_00001.1.el8sso, 18.0.14-1.redhat_00001.1.el9sso
Red Hat build of Keycloak - addressed in versions 22.0.11, 24.0.5
External References
Related Security Bulletins
- Multiple vulnerabilities in Keycloak
- Multiple vulnerabilities in Red Hat Single Sign-On 7.6
- Information disclosure in Red Hat build of Keycloak 24.0
- Multiple vulnerabilities in Red Hat build of Keycloak 24.0
- Multiple vulnerabilities in Red Hat build of Keycloak 22.0
- Information disclosure in Red Hat build of Keycloak 22.0
- Information disclosure in Red Hat Single Sign-On 7.6
- Information disclosure in Red Hat Single Sign-On 7.6
- Information disclosure in Red Hat Single Sign-On 7.6
- Information disclosure in Red Hat Single Sign-On 7.6
- Dell Data Protection Central update for third-party component