RHSA-2020:2814: Important: RH-SSO 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 7
Packages: Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 7.3Security Fix(es): keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution (CVE-2020-1714) For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVE page(s)listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:2814?
The severity of RHSA-2020:2814 is classified as important.
What vulnerabilities are addressed in RHSA-2020:2814?
RHSA-2020:2814 addresses a remote code execution vulnerability due to a lack of checks in ObjectInputStream (CVE-2020-1714).
How do I fix RHSA-2020:2814?
To fix RHSA-2020:2814, you should update your Red Hat Single Sign-On and JBoss Enterprise Application Platform installations to the latest versions that include the security fixes.
Which packages are affected by RHSA-2020:2814?
RHSA-2020:2814 affects the Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 7.3.
Is there a workaround for RHSA-2020:2814?
There is no official workaround for RHSA-2020:2814; the best course of action is to apply the provided updates.