GHSA-5545-r4hg-rj4m
Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path
At a glance
- Published
- Updated
- CVE
- CVE-2024-10492
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- CVSS_V4
- CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Description
A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. This attacker must have previous high access to the Keycloak server in order to perform resource creation, for example, an LDAP provider configuration and set up a Vault read file, which will only inform whether that file exists or not.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.keycloak:keycloak-quarkus-server | introduced 0, fixed 26.0.6 |
| Maven · org.keycloak:keycloak-quarkus-server | introduced 25.0.0, fixed 26.0.6 |
References
- https://github.com/keycloak/keycloak/security/advisories/GHSA-5545-r4hg-rj4m WEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-10492 ADVISORY
- https://github.com/keycloak/keycloak/issues/35215 WEB
- https://github.com/keycloak/keycloak/commit/d60cb9aaefc4035d322862edd8f9f252af6da951 WEB
- https://access.redhat.com/errata/RHSA-2024:10175 WEB
- https://access.redhat.com/errata/RHSA-2024:10176 WEB
- https://access.redhat.com/errata/RHSA-2024:10177 WEB
- https://access.redhat.com/errata/RHSA-2024:10178 WEB
- https://access.redhat.com/security/cve/CVE-2024-10492 WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2322447 WEB
- https://github.com/keycloak/keycloak PACKAGE
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |