A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1861 advisory.

  - keycloak: Log Injection during WebAuthn authentication or registration (CVE-2023-6484)

  - keycloak: Authorization Bypass (CVE-2023-6544)

  - keycloak: path transversal in redirection validation (CVE-2024-1132)

  - keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkLoginIframe leads to DDoS     (CVE-2024-1249)

  - undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol     (CVE-2024-1635)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1860 advisory.

  - keycloak: Log Injection during WebAuthn authentication or registration (CVE-2023-6484)

  - keycloak: Authorization Bypass (CVE-2023-6544)

  - keycloak: path transversal in redirection validation (CVE-2024-1132)

  - keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkLoginIframe leads to DDoS     (CVE-2024-1249)

  - undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol     (CVE-2024-1635)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1862 advisory.

  - keycloak: Log Injection during WebAuthn authentication or registration (CVE-2023-6484)

  - keycloak: Authorization Bypass (CVE-2023-6544)

  - keycloak: path transversal in redirection validation (CVE-2024-1132)

  - keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkLoginIframe leads to DDoS     (CVE-2024-1249)

  - undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol     (CVE-2024-1635)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0799 advisory.

  - guava: insecure temporary directory creation (CVE-2023-2976)

  - keycloak: reflected XSS via wildcard in OIDC redirect_uri (CVE-2023-6134)

  - keycloak: redirect_uri validation bypass (CVE-2023-6291)

  - keycloak: Log Injection during WebAuthn authentication or registration (CVE-2023-6484)

  - keycloak: open redirect via form_post.jwt JARM response mode (CVE-2023-6927)

  - jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter()     (CVE-2023-26048)

  - jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies (CVE-2023-26049)

  - santuario: Private Key disclosure in debug-log output (CVE-2023-44483)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0798 advisory.

  - guava: insecure temporary directory creation (CVE-2023-2976)

  - keycloak: reflected XSS via wildcard in OIDC redirect_uri (CVE-2023-6134)

  - keycloak: redirect_uri validation bypass (CVE-2023-6291)

  - keycloak: Log Injection during WebAuthn authentication or registration (CVE-2023-6484)

  - keycloak: open redirect via form_post.jwt JARM response mode (CVE-2023-6927)

  - jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter()     (CVE-2023-26048)

  - jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies (CVE-2023-26049)

  - santuario: Private Key disclosure in debug-log output (CVE-2023-44483)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0800 advisory.

  - guava: insecure temporary directory creation (CVE-2023-2976)

  - keycloak: reflected XSS via wildcard in OIDC redirect_uri (CVE-2023-6134)

  - keycloak: redirect_uri validation bypass (CVE-2023-6291)

  - keycloak: Log Injection during WebAuthn authentication or registration (CVE-2023-6484)

  - keycloak: open redirect via form_post.jwt JARM response mode (CVE-2023-6927)

  - jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter()     (CVE-2023-26048)

  - jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies (CVE-2023-26049)

  - santuario: Private Key disclosure in debug-log output (CVE-2023-44483)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
193410	RHEL 8 : Red Hat Single Sign-On 7.6.8 security update on RHEL 8 (Important) (RHSA-2024:1861)	Nessus	Red Hat Local Security Checks	high
193409	RHEL 7 : Red Hat Single Sign-On 7.6.8 and security update on RHEL 7 (Important) (RHSA-2024:1860)	Nessus	Red Hat Local Security Checks	high
193408	RHEL 9 : Red Hat Single Sign-On 7.6.8 security update on RHEL 9 (Important) (RHSA-2024:1862)	Nessus	Red Hat Local Security Checks	high
190501	RHEL 8 : Red Hat Single Sign-On 7.6.7 security update on RHEL 8 (Important) (RHSA-2024:0799)	Nessus	Red Hat Local Security Checks	high
190499	RHEL 7 : Red Hat Single Sign-On 7.6.7 security update on RHEL 7 (Important) (RHSA-2024:0798)	Nessus	Red Hat Local Security Checks	high
190496	RHEL 9 : Red Hat Single Sign-On 7.6.7 security update on RHEL 9 (Important) (RHSA-2024:0800)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2023-6484

medium

Tenable Plugins

high

high

high

high

high

high