Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Build Of Keycloak
MEDIUM 6.5
Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing…
Build Of Keycloak
MEDIUM 6.5
A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a group policy is set to extend p…
Hardened Images
HIGH 8.8
A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos princ…
Build Of Keycloak
HIGH 8.1
A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an Identity Provider (IdP) even…
Satellite
MEDIUM 6.5
n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, …
3scale Api Management
HIGH 7.5
A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly authenticate a request. A mal…
Advanced Cluster Management For Kubernetes
HIGH 7.5
A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an attacker to violate the bo…
Satellite
HIGH 8.1
An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of…
Build Of Optaplanner
HIGH 8.1
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulti…
Subscription Manager
HIGH 7.8
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.red…
Advanced Cluster Management For Kubernetes
HIGH 7.8
The grc-policy-propagator allows security escalation within the cluster. The propagator allows policies which contain some dynamically obtained value…
Openshift Container Platform
HIGH 7.1
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data …
Openshift Container Platform
HIGH 7.1
An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data…
Openstack Platform
HIGH 8.1
An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, mo…
Ceph Storage
CRITICAL 9.1
A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file syste…
Ignition
MEDIUM 6.5
A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issu…
Jboss Enterprise Application Platform
MEDIUM 5.3
This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configured with a…
Keycloak
MEDIUM 6.5
Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was po…
Keycloak
HIGH 8.8
A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default …
Certificate System
HIGH 8.1
A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and …
Openshift Container Platform
HIGH 7.0
A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw c…
Keycloak
MEDIUM 5.4
A flaw was found in keycloak before version 13.0.0. In some scenarios a user still has access to a resource after changing the role mappings in Keycl…
Advanced Cluster Management For Kubernetes
MEDIUM 6.5
An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created f…
Single Sign On
HIGH 8.8
A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a mal…
Jboss Enterprise Application Platform
MEDIUM 6.5
In JBoss EAP 6 a security domain is configured to use a cache that is shared between all applications that are in the security domain. This could all…
Ovirt Engine
MEDIUM 6.5
oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-center
Icedtea6
CRITICAL 9.1
IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files.
Keycloak
HIGH 7.5
A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured. An authent…
Openshift Container Platform
CRITICAL 9.8
A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, en…
Openshift Container Platform
HIGH 7.8
A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls…