Redhat.com vulnerabilities
We track 3 vulnerabilities in Redhat.com products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 13, 2023.
Latest Redhat.com vulnerabilities
- 7.8 High severity
RHACM: Server-Side Request Forgery
RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage of this as the conso
- 9.1 Critical severity
Keycloak: Improper Limitation of a Pathname to a Restricted Directory
keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and poten
- 7.4 High severity
Wildfly-elytron: Observable Discrepancy
wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.s