Total vulnerabilities in the database
A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible. A malicious user can register himself with a name already registered and trick admin to grant him extra privileges.
Software | From | Fixed in |
---|---|---|
redhat / single_sign-on | 7.4 | 7.4.x |
![]() |
- | 18.0.0 |