PT-2025-1684 · Red Hat+1 · Keycloak+1

Steven Hawkins · Published 2025-01-13 · Updated 2025-11-01 · CVE-2024-11736

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description A security issue allows admin users to access sensitive server environment variables and system properties through user-configurable URLs. When configuring backchannel logout URLs or admin URLs, admin users can include placeholders like ${env.VARNAME} or ${PROPNAME}. The server replaces these placeholders with the actual values of environment variables or system properties during URL processing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-526

Related Identifiers

ALT-PU-2025-13422

ALT-PU-2025-2871

CVE-2024-11736

GHSA-F4V7-3MWW-9GC2

Affected Products

Alt Linux

Keycloak

References · 14

• https://osv.dev/vulnerability/GHSA-f4v7-3mww-9gc2 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:0299 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-11736 · Security Note
• https://access.redhat.com/errata/RHSA-2025:0300 · Vendor Advisory
• https://github.com/keycloak/keycloak · Note
• https://github.com/keycloak/keycloak/commit/7a76858fe4aa39a39fb6b86dd3d2c113d9c59854 · Note
• https://github.com/keycloak/keycloak/security/advisories/GHSA-f4v7-3mww-9gc2 · Note
• https://t.me/cvenotify/107283 · Telegram Post
• https://twitter.com/seraphyn/status/1879099559261110744 · Twitter Post
• https://t.me/cvedetector/15237 · Telegram Post
• https://bugzilla.redhat.com/show_bug.cgi?id=2328850 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11736 · Note
• https://twitter.com/CVEnew/status/1879103736456552480 · Twitter Post
• https://access.redhat.com/security/cve/CVE-2024-11736 · Note