Description

A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.

Remediation

References

https://access.redhat.com/errata/RHSA-2024:0094

https://access.redhat.com/errata/RHSA-2024:0095

https://access.redhat.com/errata/RHSA-2024:0096

https://access.redhat.com/security/cve/CVE-2022-2232

https://bugzilla.redhat.com/show_bug.cgi?id=2096994

Related Vulnerabilities

CVE-2017-7676 Vulnerability in maven package org.apache.ranger:ranger

CVE-2016-4433 Vulnerability in maven package org.apache.struts.xwork:xwork-core

CVE-2016-10542 Vulnerability in npm package ws

CVE-2018-20835 Vulnerability in npm package tar-fs

CVE-2016-10521 Vulnerability in npm package jshamcrest

Severity

High

Classification

CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N