REDHAT-BUG-2322447: Path Traversal
A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file that is not within the expected context.
In Keycloak 24.0.8, a vulnerability allows unauthorized file access through path traversal in file vault configurations due to permissive regex validation. This weakness allows reading any file to the Keycloak server, but the admin user will not be able to access the contents unless they have also compromised the remote system that the password/secret is intended to be sent to. In practical terms, the only information leaked to the admin user is the existence of the file.
Version affected: <= 26.0.2
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Keycloakto a version that resolves this vulnerability.Fixed in 26.0.2
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2322447?
The severity of REDHAT-BUG-2322447 is considered high due to the potential unauthorized access to sensitive information.
How do I fix REDHAT-BUG-2322447?
To fix REDHAT-BUG-2322447, update Keycloak to the latest version beyond 26.0.2, where the vulnerability has been addressed.
What systems are affected by REDHAT-BUG-2322447?
REDHAT-BUG-2322447 affects Keycloak versions up to and including 26.0.2.
What is the nature of the vulnerability in REDHAT-BUG-2322447?
The vulnerability in REDHAT-BUG-2322447 involves unauthorized file access through path traversal in file vault configurations.
Who is impacted by REDHAT-BUG-2322447?
Users with high privileges in Keycloak may be impacted by REDHAT-BUG-2322447, as they could potentially read sensitive information from vault files.