REDHAT-BUG-2324361: Medium severity Red Hat Keycloak vulnerability
The env option KCCACHEEMBEDDEDMTLSENABLED does not work and the jgroups replication configuration is always used in plain. This option worked before in 24 and 22. More info in public issue https://github.com/keycloak/keycloak/issues/34644.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2324361?
The severity of REDHAT-BUG-2324361 has not been explicitly defined but relates to a significant feature malfunction in the Red Hat Build of Keycloak.
How do I fix REDHAT-BUG-2324361?
To address REDHAT-BUG-2324361, users should ensure they are aligned with the Keycloak configuration guidelines and monitor for updates from Red Hat.
Which versions are affected by REDHAT-BUG-2324361?
REDHAT-BUG-2324361 affects Red Hat Build of Keycloak versions between 22 and 24 inclusive.
What does the env option KC_CACHE_EMBEDDED_MTLS_ENABLED do in REDHAT-BUG-2324361?
The env option KC_CACHE_EMBEDDED_MTLS_ENABLED is intended to enable MTLS for embedded caching, but it is not functioning as expected in the specified versions.
Is there a workaround for REDHAT-BUG-2324361?
Currently, there is no known workaround for REDHAT-BUG-2324361 other than reverting to a previous version where the feature was functioning correctly.