2024-09-16 08:00:30 +00:00
{
2024-09-19 20:00:36 +00:00
"data_version" : "4.0" ,
2024-09-16 08:00:30 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"CVE_data_meta" : {
"ID" : "CVE-2024-8883" ,
2024-09-19 20:00:36 +00:00
"ASSIGNER" : "secalert@redhat.com" ,
"STATE" : "PUBLIC"
2024-09-16 08:00:30 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2024-09-19 20:00:36 +00:00
"value" : "A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "URL Redirection to Untrusted Site ('Open Redirect')" ,
"cweId" : "CWE-601"
}
]
}
]
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "Red Hat" ,
"product" : {
"product_data" : [
{
"product_name" : "Red Hat Build of Keycloak" ,
"version" : {
"version_data" : [
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"defaultStatus" : "unaffected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"defaultStatus" : "unaffected"
}
}
]
}
} ,
{
"product_name" : "Red Hat build of Keycloak 22" ,
"version" : {
"version_data" : [
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "22.0.13-1" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "22-18" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "22-21" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
}
]
}
} ,
{
"product_name" : "Red Hat build of Keycloak 24" ,
"version" : {
"version_data" : [
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "24.0.8-1" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "24-17" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "24-17" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
}
]
}
} ,
2024-11-05 04:00:31 +00:00
{
"product_name" : "Red Hat JBoss Enterprise Application Platform 8" ,
"version" : {
"version_data" : [
2024-11-26 20:00:30 +00:00
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"defaultStatus" : "unaffected"
}
} ,
2024-11-05 04:00:31 +00:00
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"defaultStatus" : "unaffected"
}
}
]
}
} ,
{
"product_name" : "Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8" ,
"version" : {
"version_data" : [
2024-11-26 20:00:30 +00:00
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:800.4.1-1.GA_redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:8.0.4-3.GA_redhat_00007.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
2024-11-05 04:00:31 +00:00
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.33.0-1.redhat_00015.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "1:2.0.0-2.redhat_00005.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:1.8.0-2.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.2.0-2.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:1.16.1-2.redhat_00007.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:3.2.2-28.redhat_2.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.15.1-1.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:3.14.0-2.redhat_00006.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:4.0.5-1.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "1:2.0.0-2.redhat_00005.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.0.1-1.redhat_00002.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:0.1.0-2.redhat_00010.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:1.12.284-2.redhat_00002.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:1.2.5-2.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:800.4.0-1.GA_redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.1.0-4.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:6.2.31-1.Final_redhat_00002.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:8.0.1-3.Final_redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:0.8.1-2.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:1.1.3-1.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:3.0.1-1.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:1.1.3-1.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:3.5.3-1.Final_redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:4.0.2-1.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:5.3.10-1.Final_redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.22.1-1.redhat_00002.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:6.0.3-1.Final_redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:9.37.3-1.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:9.6.0-1.redhat_00002.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.3.0-1.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.0.1-3.Final_redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:3.0.1-2.Final_redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:3.0.4-1.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:8.0.0-6.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.0.16-1.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.2.0-1.redhat_00001.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:8.0.4-2.GA_redhat_00005.1.el8eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
}
]
}
} ,
{
"product_name" : "Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9" ,
"version" : {
"version_data" : [
2024-11-26 20:00:30 +00:00
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:800.4.1-1.GA_redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:8.0.4-3.GA_redhat_00007.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
2024-11-05 04:00:31 +00:00
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.33.0-1.redhat_00015.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "1:2.0.0-2.redhat_00005.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:1.8.0-2.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.2.0-2.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:1.16.1-2.redhat_00007.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:3.2.2-28.redhat_2.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.15.1-1.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:3.14.0-2.redhat_00006.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:4.0.5-1.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "1:2.0.0-2.redhat_00005.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.0.1-1.redhat_00002.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:0.1.0-2.redhat_00010.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:1.12.284-2.redhat_00002.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:1.2.5-2.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:800.4.0-1.GA_redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.1.0-4.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:6.2.31-1.Final_redhat_00002.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:8.0.1-3.Final_redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:0.8.1-2.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:1.1.3-1.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:3.0.1-1.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:1.1.3-1.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:3.5.3-1.Final_redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:4.0.2-1.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:5.3.10-1.Final_redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.22.1-1.redhat_00002.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:6.0.3-1.Final_redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:9.37.3-1.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:9.6.0-1.redhat_00002.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.3.0-1.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.0.1-3.Final_redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:3.0.1-2.Final_redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:3.0.4-1.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:8.0.0-6.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.0.16-1.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:2.2.0-1.redhat_00001.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:8.0.4-2.GA_redhat_00005.1.el9eap" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
}
]
}
} ,
2024-09-19 20:00:36 +00:00
{
"product_name" : "Red Hat Single Sign-On 7" ,
"version" : {
"version_data" : [
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"defaultStatus" : "unaffected"
}
}
]
}
} ,
{
"product_name" : "Red Hat Single Sign-On 7.6 for RHEL 7" ,
"version" : {
"version_data" : [
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:18.0.18-1.redhat_00001.1.el7sso" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
}
]
}
} ,
{
"product_name" : "Red Hat Single Sign-On 7.6 for RHEL 8" ,
"version" : {
"version_data" : [
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:18.0.18-1.redhat_00001.1.el8sso" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
}
]
}
} ,
{
"product_name" : "Red Hat Single Sign-On 7.6 for RHEL 9" ,
"version" : {
"version_data" : [
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "0:18.0.18-1.redhat_00001.1.el9sso" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
}
]
}
} ,
{
"product_name" : "RHEL-8 based Middleware Containers" ,
"version" : {
"version_data" : [
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "7.6-54" ,
"lessThan" : "*" ,
"versionType" : "rpm" ,
"status" : "unaffected"
}
] ,
"defaultStatus" : "affected"
}
}
]
}
}
]
}
}
]
}
} ,
"references" : {
"reference_data" : [
2024-11-26 20:00:30 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:10385" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:10385"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:10386" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:10386"
} ,
2024-09-19 20:00:36 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6878" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:6878"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6879" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:6879"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6880" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:6880"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6882" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:6882"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6886" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:6886"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6887" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:6887"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6888" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:6888"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6889" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:6889"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:6890" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:6890"
} ,
2024-11-05 04:00:31 +00:00
{
"url" : "https://access.redhat.com/errata/RHSA-2024:8823" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:8823"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:8824" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:8824"
} ,
{
"url" : "https://access.redhat.com/errata/RHSA-2024:8826" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/errata/RHSA-2024:8826"
} ,
2024-09-19 20:00:36 +00:00
{
"url" : "https://access.redhat.com/security/cve/CVE-2024-8883" ,
"refsource" : "MISC" ,
"name" : "https://access.redhat.com/security/cve/CVE-2024-8883"
} ,
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2312511" ,
"refsource" : "MISC" ,
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=2312511"
} ,
{
"url" : "https://github.com/keycloak/keycloak/blob/main/services/src/main/java/org/keycloak/protocol/oidc/utils/RedirectUtils.java" ,
"refsource" : "MISC" ,
"name" : "https://github.com/keycloak/keycloak/blob/main/services/src/main/java/org/keycloak/protocol/oidc/utils/RedirectUtils.java"
}
]
} ,
2024-10-30 06:00:31 +00:00
"work_around" : [
{
"lang" : "en" ,
"value" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
] ,
2024-09-19 20:00:36 +00:00
"credits" : [
{
"lang" : "en" ,
"value" : "Red Hat would like to thank Karsten Meyer zu Selhausen and Niklas Conrad for reporting this issue."
}
] ,
"impact" : {
"cvss" : [
{
2024-10-30 06:00:31 +00:00
"attackComplexity" : "LOW" ,
2024-09-19 20:00:36 +00:00
"attackVector" : "NETWORK" ,
"availabilityImpact" : "NONE" ,
2024-10-30 06:00:31 +00:00
"baseScore" : 6.1 ,
2024-09-19 20:00:36 +00:00
"baseSeverity" : "MEDIUM" ,
2024-10-30 06:00:31 +00:00
"confidentialityImpact" : "LOW" ,
"integrityImpact" : "LOW" ,
2024-09-19 20:00:36 +00:00
"privilegesRequired" : "NONE" ,
2024-10-30 06:00:31 +00:00
"scope" : "CHANGED" ,
2024-09-19 20:00:36 +00:00
"userInteraction" : "REQUIRED" ,
2024-10-30 06:00:31 +00:00
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" ,
2024-09-19 20:00:36 +00:00
"version" : "3.1"
2024-09-16 08:00:30 +00:00
}
]
}
}