RHSA-2020:0946: Important: Red Hat Single Sign-On 7.3.7 security update on RHEL 7
Red Hat Single Sign-On 7.3 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications.This release of Red Hat Single Sign-On 7.3.7 on RHEL 7 serves as a replacement for Red Hat Single Sign-On 7.3.6, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.Security Fix(es): keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP (CVE-2020-1744) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:0946?
The severity of RHSA-2020:0946 is classified as important.
What products are affected by RHSA-2020:0946?
RHSA-2020:0946 affects the rh-sso7-keycloak and rh-sso7-keycloak-server packages.
How do I fix RHSA-2020:0946?
To fix RHSA-2020:0946, update to rh-sso7-keycloak or rh-sso7-keycloak-server version 4.8.18-1.Final_redhat_00001.1.el7.
What is Red Hat Single Sign-On 7.3 in relation to RHSA-2020:0946?
Red Hat Single Sign-On 7.3 is a standalone server based on the Keycloak project that provides authentication and single sign-on capabilities.
Is there a workaround for RHSA-2020:0946?
No specific workaround is mentioned for RHSA-2020:0946; the recommended action is to apply the update.