296,733
Total vulnerabilities in the database
Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.
| Software | From | Fixed in |
|---|---|---|
| redhat / keycloak | - | 17.0.1 |
| redhat / single_sign-on | 7.5.0 | 7.5.0.x |
org.keycloak / keycloak-core
|
- | 17.0.1 |