Information disclosure in Keycloak - CVE-2024-5967
Published: June 24, 2024
Vulnerability identifier: #VU93095
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-5967
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to gain access to potentially sensitive information.
The vulnerability exists due to the LDAP testing endpoint allows to change the Connection URL independently
of and without having to re-enter the currently configured LDAP bind
credentials. A remote privileged user can modify the LDAP host URL ("Connection URL") to the attacker-controlled system and force the application to send credentials to a malicious server.
Affected software
Keycloak
Red Hat Single Sign-On
rh-sso7-keycloak (Red Hat package)
Red Hat build of Keycloak
Red Hat Single Sign-On
rh-sso7-keycloak (Red Hat package)
Red Hat build of Keycloak
How to mitigate CVE-2024-5967
Install updates from vendor's website.
Keycloak - update to 25.0.1
Red Hat Single Sign-On - update to 7.6.10
rh-sso7-keycloak (Red Hat package) - addressed in versions 18.0.16-1.redhat_00001.1.el7sso, 18.0.16-1.redhat_00001.1.el8sso, 18.0.16-1.redhat_00001.1.el9sso
Red Hat build of Keycloak - update to 22.0.12
Red Hat Single Sign-On - update to 7.6.10
rh-sso7-keycloak (Red Hat package) - addressed in versions 18.0.16-1.redhat_00001.1.el7sso, 18.0.16-1.redhat_00001.1.el8sso, 18.0.16-1.redhat_00001.1.el9sso
Red Hat build of Keycloak - update to 22.0.12
External References
Related Security Bulletins
- Information disclosure in Keycloak
- Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for RHEL 9
- Multiple vulnerabilities in Red Hat Single Sign-On 7.6 for RHEL 8
- Multiple vulnerabilities in Red Hat Single Sign-On 7.6
- Multiple vulnerabilities in Red Hat Single Sign-On 7.6
- Multiple vulnerabilities in Red Hat Single Sign-On 7.6
- Multiple vulnerabilities in Red Hat build of Keycloak 22.0
- Multiple vulnerabilities in Red Hat build of Keycloak 22.0