REDHAT-BUG-2322447: Path Traversal
First published: Tue Oct 29 2024(Updated: )
A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context. In Keycloak 24.0.8, a vulnerability allows unauthorized file access through path traversal in file vault configurations due to permissive regex validation. This weakness allows reading any file to the Keycloak server, but the admin user will not be able to access the contents unless they have also compromised the remote system that the password/secret is intended to be sent to. In practical terms, the only information leaked to the admin user is the existence of the file. Version affected: <= 26.0.2
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Keycloak | <=26.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2024:10175
- https://access.redhat.com/errata/RHSA-2024:10176
- https://access.redhat.com/errata/RHSA-2024:10177
- https://access.redhat.com/errata/RHSA-2024:10178
- https://github.com/keycloak/keycloak/pull/35223/commits/9fe3c398560575b8c51e41f5ba7823b760978472
- https://bugzilla.redhat.com/show_bug.cgi?id=2322447
Frequently Asked Questions
What is the severity of REDHAT-BUG-2322447?
The severity of REDHAT-BUG-2322447 is considered high due to the potential unauthorized access to sensitive information.
How do I fix REDHAT-BUG-2322447?
To fix REDHAT-BUG-2322447, update Keycloak to the latest version beyond 26.0.2, where the vulnerability has been addressed.
What systems are affected by REDHAT-BUG-2322447?
REDHAT-BUG-2322447 affects Keycloak versions up to and including 26.0.2.
What is the nature of the vulnerability in REDHAT-BUG-2322447?
The vulnerability in REDHAT-BUG-2322447 involves unauthorized file access through path traversal in file vault configurations.
Who is impacted by REDHAT-BUG-2322447?
Users with high privileges in Keycloak may be impacted by REDHAT-BUG-2322447, as they could potentially read sensitive information from vault files.
- agent/severity
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-10492
- agent/last-modified-date
- agent/references
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/keycloak
- canonical/red hat keycloak