Single Sign On
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:single_sign_on:7.2:*:*:*:*:*:*:*
part: a version: 7.2 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Single Sign On (1e613277-631e-5fab-8ccf-23a2cf2a0e98) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-2585 |
vulnerable | 2026-06-08 05:09:24.693864 |
Details available
Red Hat Keycloak before version 2.5.1 has an implementation of HMAC verification for JWS tokens that uses a method that runs in non-constant time, potentially leaving the application vulnerable to timing attacks.
Published: 2018-03-12T15:00:00.000Z
Updated: 2024-09-16T22:56:17.924Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8629 |
vulnerable | 2026-06-08 05:08:14.507566 |
Details available
Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service account authentication could use this flaw to bypass normal permissions and delete users in a separate realm.
Published: 2018-03-12T15:00:00.000Z
Updated: 2024-09-16T17:52:54.232Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.