PT-2022-14228 · Red Hat · Keycloak

Published 2022-10-19 · Updated 2024-05-29 · CVE-2022-1970

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions keycloak version 18.0.0

Description The issue concerns an open redirect in the authentication endpoint via the redirect uri parameter. However, it has been determined that this is a known misconfiguration, and recommendations to mitigate the issue already exist in the Keycloak documentation.

Recommendations For keycloak version 18.0.0, follow the recommendations in the Keycloak documentation to mitigate the open redirect issue, specifically configuring the authentication endpoint to prevent open redirects.

Related Identifiers

CVE-2022-1970

Affected Products

Keycloak

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-1970 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1970 · Vendor Advisory
• https://t.me/cvenotify/44460 · Telegram Post
• https://t.me/cibsecurity/51822 · Telegram Post