High
Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos
Type: advisorySources: Official CVE List
A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origin validation for incoming messages.
- Products
- Migration Toolkit for Applications 6, Migration Toolkit for Applications 7, RHEL-8 based Middleware Containers, RHOSS-1.33-RHEL-8, RHSSO 7.6.8, Red Hat AMQ Broker 7, Red Hat Data Grid 8, Red Hat Decision Manager 7, Red Hat Developer Hub 1, Red Hat Fuse 7, Red Hat JBoss Data Grid 7, Red Hat JBoss Enterprise Application Platform 6, Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat Process Automation 7, Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8, Red Hat Single Sign-On 7.6 for RHEL 9, Red Hat build of Apicurio Registry 2, Red Hat build of Keycloak 22, Red Hat build of Keycloak 22.0.10, streams for Apache Kafka
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2024-1249
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 09:34 UTC · Revision 1
Source evidence
Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos
core-cve · Original sourcePublished 17 Apr 2024, 13:22 UTC
A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origin validation for incoming messages.
cve:CVE-2024-1249
Red Hat AMQ Broker 7
Fixed versions: Not specified
Red Hat build of Keycloak 22
Fixed versions: Not specified
Red Hat build of Keycloak 22
Fixed versions: Not specified
Red Hat build of Keycloak 22
Fixed versions: Not specified
Red Hat build of Keycloak 22.0.10
Fixed versions: Not specified
Red Hat Single Sign-On 7.6 for RHEL 7
Fixed versions: Not specified
Red Hat Single Sign-On 7.6 for RHEL 8
Fixed versions: Not specified
Red Hat Single Sign-On 7.6 for RHEL 9
Fixed versions: Not specified
RHEL-8 based Middleware Containers
Fixed versions: Not specified
RHOSS-1.33-RHEL-8
Fixed versions: Not specified
RHOSS-1.33-RHEL-8
Fixed versions: Not specified
RHOSS-1.33-RHEL-8
Fixed versions: Not specified
RHOSS-1.33-RHEL-8
Fixed versions: Not specified
RHOSS-1.33-RHEL-8
Fixed versions: Not specified
RHOSS-1.33-RHEL-8
Fixed versions: Not specified
RHOSS-1.33-RHEL-8
Fixed versions: Not specified
RHOSS-1.33-RHEL-8
Fixed versions: Not specified
RHOSS-1.33-RHEL-8
Fixed versions: Not specified
RHSSO 7.6.8
Fixed versions: Not specified
Migration Toolkit for Applications 6
Fixed versions: Not specified
Migration Toolkit for Applications 7
Fixed versions: Not specified
Red Hat build of Apicurio Registry 2
Fixed versions: Not specified
Red Hat Data Grid 8
Fixed versions: Not specified
Red Hat Decision Manager 7
Fixed versions: Not specified
Red Hat Developer Hub 1
Fixed versions: Not specified
Red Hat Fuse 7
Fixed versions: Not specified
Red Hat JBoss Data Grid 7
Fixed versions: Not specified
Red Hat JBoss Enterprise Application Platform 6
Fixed versions: Not specified
Red Hat JBoss Enterprise Application Platform 6
Fixed versions: Not specified
Red Hat JBoss Enterprise Application Platform 6
Fixed versions: Not specified
Red Hat JBoss Enterprise Application Platform 6
Fixed versions: Not specified
Red Hat JBoss Enterprise Application Platform 6
Fixed versions: Not specified
Red Hat JBoss Enterprise Application Platform 6
Fixed versions: Not specified
Red Hat JBoss Enterprise Application Platform 6
Fixed versions: Not specified
Red Hat JBoss Enterprise Application Platform 6
Fixed versions: Not specified
Red Hat JBoss Enterprise Application Platform 7
Fixed versions: Not specified
Red Hat JBoss Enterprise Application Platform 8
Fixed versions: Not specified
Red Hat JBoss Enterprise Application Platform Expansion Pack
Fixed versions: Not specified
Red Hat Process Automation 7
Fixed versions: Not specified
streams for Apache Kafka
Fixed versions: Not specified
Complete source record
{
"id": "434ccbeae11d4d65588799898dd9933123b99882f522f7fc7f1a2978c1d60c42",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1249",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos",
"summary": "A flaw was found in Keycloak's OIDC component in the \"checkLoginIframe,\" which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origin validation for incoming messages.",
"evidence": "cve:CVE-2024-1249",
"products": [
{
"name": {
"value": "Red Hat AMQ Broker 7",
"evidence": "/containers/cna/affected/1/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat build of Keycloak 22",
"evidence": "/containers/cna/affected/2/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat build of Keycloak 22",
"evidence": "/containers/cna/affected/3/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat build of Keycloak 22",
"evidence": "/containers/cna/affected/4/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat build of Keycloak 22.0.10",
"evidence": "/containers/cna/affected/5/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Single Sign-On 7.6 for RHEL 7",
"evidence": "/containers/cna/affected/6/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Single Sign-On 7.6 for RHEL 8",
"evidence": "/containers/cna/affected/7/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Single Sign-On 7.6 for RHEL 9",
"evidence": "/containers/cna/affected/8/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "RHEL-8 based Middleware Containers",
"evidence": "/containers/cna/affected/9/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "RHOSS-1.33-RHEL-8",
"evidence": "/containers/cna/affected/10/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "RHOSS-1.33-RHEL-8",
"evidence": "/containers/cna/affected/11/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "RHOSS-1.33-RHEL-8",
"evidence": "/containers/cna/affected/12/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "RHOSS-1.33-RHEL-8",
"evidence": "/containers/cna/affected/13/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "RHOSS-1.33-RHEL-8",
"evidence": "/containers/cna/affected/14/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "RHOSS-1.33-RHEL-8",
"evidence": "/containers/cna/affected/15/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "RHOSS-1.33-RHEL-8",
"evidence": "/containers/cna/affected/16/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "RHOSS-1.33-RHEL-8",
"evidence": "/containers/cna/affected/17/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "RHOSS-1.33-RHEL-8",
"evidence": "/containers/cna/affected/18/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "RHSSO 7.6.8",
"evidence": "/containers/cna/affected/19/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Migration Toolkit for Applications 6",
"evidence": "/containers/cna/affected/20/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Migration Toolkit for Applications 7",
"evidence": "/containers/cna/affected/21/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat build of Apicurio Registry 2",
"evidence": "/containers/cna/affected/22/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Data Grid 8",
"evidence": "/containers/cna/affected/23/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Decision Manager 7",
"evidence": "/containers/cna/affected/24/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Developer Hub 1",
"evidence": "/containers/cna/affected/25/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Fuse 7",
"evidence": "/containers/cna/affected/26/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat JBoss Data Grid 7",
"evidence": "/containers/cna/affected/27/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat JBoss Enterprise Application Platform 6",
"evidence": "/containers/cna/affected/28/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat JBoss Enterprise Application Platform 6",
"evidence": "/containers/cna/affected/29/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat JBoss Enterprise Application Platform 6",
"evidence": "/containers/cna/affected/30/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat JBoss Enterprise Application Platform 6",
"evidence": "/containers/cna/affected/31/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat JBoss Enterprise Application Platform 6",
"evidence": "/containers/cna/affected/32/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat JBoss Enterprise Application Platform 6",
"evidence": "/containers/cna/affected/33/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat JBoss Enterprise Application Platform 6",
"evidence": "/containers/cna/affected/34/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat JBoss Enterprise Application Platform 6",
"evidence": "/containers/cna/affected/35/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat JBoss Enterprise Application Platform 7",
"evidence": "/containers/cna/affected/36/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat JBoss Enterprise Application Platform 8",
"evidence": "/containers/cna/affected/37/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"evidence": "/containers/cna/affected/38/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Process Automation 7",
"evidence": "/containers/cna/affected/39/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "streams for Apache Kafka",
"evidence": "/containers/cna/affected/40/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2024-1249",
"aliases": [
"CVE-2024-1249"
],
"metrics": [
{
"other": {
"type": "Red Hat severity rating",
"content": {
"value": "Important",
"namespace": "https://access.redhat.com/security/updates/classification/"
}
}
},
{
"format": "CVSS",
"cvssV3_1": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 7.4,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
}
}
],
"affected": [
{
"versions": [
{
"status": "affected",
"version": "21.1.0",
"lessThan": "22.0.10",
"versionType": "semver"
},
{
"status": "affected",
"version": "23.0.0",
"lessThan": "24.0.3",
"versionType": "semver"
}
],
"packageName": "keycloak",
"collectionURL": "https://github.com/keycloak/keycloak",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:amq_broker:7.12"
],
"vendor": "Red Hat",
"product": "Red Hat AMQ Broker 7",
"packageName": "keycloak",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:build_keycloak:22::el9"
],
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 22",
"versions": [
{
"status": "unaffected",
"version": "22.0.10-1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhbk/keycloak-operator-bundle",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:build_keycloak:22::el9"
],
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 22",
"versions": [
{
"status": "unaffected",
"version": "22-13",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhbk/keycloak-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:build_keycloak:22::el9"
],
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 22",
"versions": [
{
"status": "unaffected",
"version": "22-16",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhbk/keycloak-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:build_keycloak:22"
],
"vendor": "Red Hat",
"product": "Red Hat build of Keycloak 22.0.10",
"packageName": "keycloak",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:red_hat_single_sign_on:7.6::el7"
],
"vendor": "Red Hat",
"product": "Red Hat Single Sign-On 7.6 for RHEL 7",
"versions": [
{
"status": "unaffected",
"version": "0:18.0.13-1.redhat_00001.1.el7sso",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rh-sso7-keycloak",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:red_hat_single_sign_on:7.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat Single Sign-On 7.6 for RHEL 8",
"versions": [
{
"status": "unaffected",
"version": "0:18.0.13-1.redhat_00001.1.el8sso",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rh-sso7-keycloak",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:red_hat_single_sign_on:7.6::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Single Sign-On 7.6 for RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "0:18.0.13-1.redhat_00001.1.el9sso",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rh-sso7-keycloak",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.6-46",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rh-sso-7/sso76-openshift-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.33::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.33-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.33.0-5",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-data-index-ephemeral-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.33::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.33-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.33.0-5",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-data-index-postgresql-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.33::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.33-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.33.0-5",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.33::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.33-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.33.0-5",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.33::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.33-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.33.0-5",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.33::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.33-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.33.0-5",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-operator-bundle",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.33::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.33-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.33.0-3",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-rhel8-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.33::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.33-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.33.0-5",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-swf-builder-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.33::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.33-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.33.0-5",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-swf-devmode-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:red_hat_single_sign_on:7.6"
],
"vendor": "Red Hat",
"product": "RHSSO 7.6.8",
"packageName": "rh-sso7-keycloak",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:6"
],
"vendor": "Red Hat",
"product": "Migration Toolkit for Applications 6",
"packageName": "mta/mta-ui-rhel9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:7"
],
"vendor": "Red Hat",
"product": "Migration Toolkit for Applications 7",
"packageName": "mta/mta-ui-rhel9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:service_registry:2"
],
"vendor": "Red Hat",
"product": "Red Hat build of Apicurio Registry 2",
"packageName": "keycloak",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:jboss_data_grid:8"
],
"vendor": "Red Hat",
"product": "Red Hat Data Grid 8",
"packageName": "keycloak",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:jboss_enterprise_brms_platform:7"
],
"vendor": "Red Hat",
"product": "Red Hat Decision Manager 7",
"packageName": "keycloak",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhdh:1"
],
"vendor": "Red Hat",
"product": "Red Hat Developer Hub 1",
"packageName": "rhdh/rhdh-hub-rhel9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"vendor": "Red Hat",
"product": "Red Hat Fuse 7",
"packageName": "keycloak",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:jboss_data_grid:7"
],
"vendor": "Red Hat",
"product": "Red Hat JBoss Data Grid 7",
"packageName": "keycloak",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:6"
],
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 6",
"packageName": "keycloak",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:6"
],
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 6",
"packageName": "keycloak-adapter-eap6",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:6"
],
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 6",
"packageName": "keycloak-adapter-sso7_2-eap6",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:6"
],
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 6",
"packageName": "keycloak-adapter-sso7_3-eap6",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:6"
],
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 6",
"packageName": "keycloak-adapter-sso7_4-eap6",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:6"
],
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 6",
"packageName": "keycloak-adapter-sso7_5-eap6",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:6"
],
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 6",
"packageName": "org.keycloak-keycloak-parent",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:6"
],
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 6",
"packageName": "rh-sso7-keycloak",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7"
],
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"packageName": "keycloak-core",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8"
],
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform 8",
"packageName": "keycloak-core",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:jbosseapxp"
],
"vendor": "Red Hat",
"product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"packageName": "keycloak",
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
],
"vendor": "Red Hat",
"product": "Red Hat Process Automation 7",
"packageName": "keycloak",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:amq_streams:1"
],
"vendor": "Red Hat",
"product": "streams for Apache Kafka",
"packageName": "keycloak",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
}
],
"modified": "2026-10-27T02:12:01.649Z",
"provider": "cve",
"references": [
"https://access.redhat.com/errata/RHSA-2024:1860",
"https://access.redhat.com/errata/RHSA-2024:1861",
"https://access.redhat.com/errata/RHSA-2024:1862",
"https://access.redhat.com/errata/RHSA-2024:1864",
"https://access.redhat.com/errata/RHSA-2024:1866",
"https://access.redhat.com/errata/RHSA-2024:1867",
"https://access.redhat.com/errata/RHSA-2024:1868",
"https://access.redhat.com/errata/RHSA-2024:2945",
"https://access.redhat.com/errata/RHSA-2024:4057",
"https://access.redhat.com/security/cve/CVE-2024-1249",
"https://bugzilla.redhat.com/show_bug.cgi?id=2262918"
],
"provider_metadata": {
"adp": [
{
"title": "CISA ADP Vulnrichment",
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"id": "CVE-2024-1249",
"role": "CISA Coordinator",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-04-25T17:33:02.839974Z"
}
}
}
],
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2024-06-04T18:00:28.545Z"
}
},
{
"title": "CVE Program Container",
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2024:1860",
"name": "RHSA-2024:1860",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1861",
"name": "RHSA-2024:1861",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1862",
"name": "RHSA-2024:1862",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1864",
"name": "RHSA-2024:1864",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1866",
"name": "RHSA-2024:1866",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1867",
"name": "RHSA-2024:1867",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:1868",
"name": "RHSA-2024:1868",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:2945",
"name": "RHSA-2024:2945",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2024:4057",
"name": "RHSA-2024:4057",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://access.redhat.com/security/cve/CVE-2024-1249",
"tags": [
"vdb-entry",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2262918",
"name": "RHBZ#2262918",
"tags": [
"issue-tracking",
"x_refsource_REDHAT",
"x_transferred"
]
}
],
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2024-08-01T18:33:25.533Z"
}
}
],
"cna": {
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat",
"dateUpdated": "2026-10-27T02:12:01.649Z"
}
}
},
"related_cves": [
{
"value": "CVE-2024-1249",
"evidence": "/cveMetadata/cveId"
}
],
"security_relevant": true,
"severity_evidence": "/containers/cna/metrics"
},
"source_id": "core-cve",
"document_id": 379098,
"published_at": "2024-04-17T13:22:48.335+00:00"
}