A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Objects, which would then get deserialized in a privileged context and potentially lead to remote code execution.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of
    ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java
    Objects, which would then get deserialized in a privileged context and potentially lead to remote code
    execution. (CVE-2020-1714)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2816 advisory.

    Packages: Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6

    Security Fix(es):

    * keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution (CVE-2020-1714)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s)     listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 / 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2814 advisory.

    Packages: Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 7.3

    Security Fix(es):

    * keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution (CVE-2020-1714)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s)     listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
416793	SCA: security update for org.keycloak:keycloak-common, org.keycloak:keycloak-core (GHSA-m6mm-q862-j366)	Tenable Cloud Security	SCA Checks	high
416793	SCA: security update for org.keycloak:keycloak-common, org.keycloak:keycloak-core (GHSA-m6mm-q862-j366)	Tenable Self-Hosted Container Security	SCA Checks	high
138090	RHEL 6 / 7 : RH-SSO 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6 (Important) (RHSA-2020:2816)	Nessus	Red Hat Local Security Checks	high
138089	RHEL 6 / 7 / 8 : RH-SSO 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 7 (Important) (RHSA-2020:2814)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2020-1714

high

Tenable Plugins

high

high

high

high