RHSA-2020:2816: Important: RH-SSO 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6

Published Jul 2, 2020

Updated

Packages: Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6Security Fix(es): keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution (CVE-2020-1714) For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVE page(s)listed in the References section.

Affected Software

2 affected components

Red Hat Single Sign-On

Red Hat JBoss Enterprise Application Platform

Remediation

Event History

Jul 2, 2020

Advisory Published

12:00 AM

Data Sourced

12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2020:2816?

The severity of RHSA-2020:2816 is classified as Important.

What vulnerabilities are addressed in RHSA-2020:2816?

RHSA-2020:2816 addresses a vulnerability that allows for Remote Code Execution due to lack of checks in ObjectInputStream (CVE-2020-1714).

How do I fix RHSA-2020:2816?

To fix RHSA-2020:2816, you should update to the patched version of the affected Red Hat Single Sign-On package.

Which versions are affected by RHSA-2020:2816?

RHSA-2020:2816 affects Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6.

Is there a workaround for RHSA-2020:2816?

There are no official workarounds provided for RHSA-2020:2816; updating to a secure version is recommended.