PT-2023-1508 · Red Hat · Red Hat Single Sign-On

Chess Hazlett + 1 · Published 2023-03-01 · Updated 2023-09-26 · CVE-2022-4039

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Red Hat Single Sign-On for OpenShift container images (affected versions not specified)

Description A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration. The issue is related to the default access control settings of the Keycloak identity and access management tool, which can be exploited by a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2023-00935

CVE-2022-4039

Affected Products

Red Hat Single Sign-On

References · 11

• https://access.redhat.com/errata/RHSA-2023:1047 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2022-4039 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00935 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2143416 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4039 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4039 · Vendor Advisory
• https://twitter.com/DMFezzaReedCISA/status/1705253973324714238 · Twitter Post
• https://twitter.com/CVEnew/status/1705223997254730219 · Twitter Post
• https://t.me/cibsecurity/70948 · Telegram Post
• https://t.me/cvenotify/58596 · Telegram Post
• https://access.redhat.com/security/cve/cve-2022-4039 · Note