リモートのRedhat Enterprise Linux 6ホストにインストールされているパッケージは、RHSA-2020：5526アドバイザリに記載されている脆弱性の影響を受けます。

  - keycloak：アカウントREST APIはユーザーメタデータ属性を更新できます（CVE-2020-27826）

Nessusはこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5526 advisory.

    Red Hat Single Sign-On 7.4 is a standalone server, based on the Keycloak project, that provides     authentication and standards-based single sign-on capabilities for web and mobile applications.

    This release of Red Hat Single Sign-On 7.4.4 on RHEL 6 serves as a replacement for Red Hat Single Sign-On     7.4.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked     to in the References.

    Security Fix(es):

    * keycloak: Account REST API can update user metadata attributes (CVE-2020-27826)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

遠端 Redhat Enterprise Linux 6 主機上安裝的套件受到 RHSA-2020: 5526 公告中提及的一個弱點影響。

  - keycloak：帳戶 REST API 可更新使用者詮釋資料屬性 (CVE-2020-27826)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5527 advisory.

    Red Hat Single Sign-On 7.4 is a standalone server, based on the Keycloak project, that provides     authentication and standards-based single sign-on capabilities for web and mobile applications.

    This release of Red Hat Single Sign-On 7.4.4 on RHEL 7 serves as a replacement for Red Hat Single Sign-On     7.4.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked     to in the References.

    Security Fix(es):

    * keycloak: Account REST API can update user metadata attributes (CVE-2020-27826)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5528 advisory.

    Red Hat Single Sign-On 7.4 is a standalone server, based on the Keycloak project, that provides     authentication and standards-based single sign-on capabilities for web and mobile applications.

    This release of Red Hat Single Sign-On 7.4.4 on RHEL 8 serves as a replacement for Red Hat Single Sign-On     7.4.3, and includes bug fixes and enhancements, which are documented in the Release Notes document linked     to in the References.

    Security Fix(es):

    * keycloak: Account REST API can update user metadata attributes (CVE-2020-27826)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

远程 Redhat Enterprise Linux 6 主机上安装的程序包受到 RHSA-2020: 5526 公告提及的一个漏洞的影响。

  - keycloak：帐户 REST API 可更新用户元数据属性 (CVE-2020-27826)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

リモートのRedhat Enterprise Linux 7ホストにインストールされているパッケージは、RHSA-2020: 5527アドバイザリに記載されている脆弱性の影響を受けます。

  - keycloak: アカウントREST APIはユーザーメタデータ属性を更新できます（CVE-2020-27826）

Nessusはこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

リモートのRedhat Enterprise Linux 8ホストにイントールされているパッケージは、RHSA-2020：5528アドバイザリに記載されている脆弱性の影響を受けます。

  - keycloak：アカウントREST APIはユーザーメタデータ属性を更新できます（CVE-2020-27826）

Nessusはこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

遠端 Redhat Enterprise Linux 7 主機上安裝的套件受到 RHSA-2020: 5527 公告中提及的一個弱點影響。

  - keycloak：帳戶 REST API 可更新使用者詮釋資料屬性 (CVE-2020-27826)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2020: 5528 公告中提及的一個弱點影響。

  - keycloak：帳戶 REST API 可更新使用者詮釋資料屬性 (CVE-2020-27826)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

远程 Redhat Enterprise Linux 7 主机上安装的程序包受到 RHSA-2020: 5527 公告提及的一个漏洞的影响。

  - keycloak：帐户 REST API 可更新用户元数据属性 (CVE-2020-27826)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2020: 5528 公告提及的一个漏洞的影响。

  - keycloak：帐户 REST API 可更新用户元数据属性 (CVE-2020-27826)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
144377	RHEL 6：RHEL 6対応のRed Hat Single Sign-On 7.4.4のセキュリティ更新（重要度中）（RHSA-2020：5526）	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	medium
144377	RHEL 6 : Red Hat Single Sign-On 7.4.4 security update on RHEL 6 (Low) (RHSA-2020:5526)	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	medium
144377	RHEL 6：RHEL 6 上的 Red Hat Single Sign-On 7.4.4 安全性更新 (低) (RHSA-2020: 5526)	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	medium
144379	RHEL 7 : Red Hat Single Sign-On 7.4.4 security update on RHEL 7 (Low) (RHSA-2020:5527)	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	medium
144391	RHEL 8 : Red Hat Single Sign-On 7.4.4 security update on RHEL 8 (Low) (RHSA-2020:5528)	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	medium
144377	RHEL 6：RHEL 6 上的 Red Hat Single Sign-On 7.4.4 安全更新（低）(RHSA-2020: 5526)	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	medium
144379	RHEL 7：RHEL 7対応のRed Hat Single Sign-On 7.4.4のセキュリティ更新（重要度中）（RHSA-2020: 5527）	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	medium
144391	RHEL 8：RHEL 8対応のRed Hat Single Sign-On 7.4.4のセキュリティ更新（重要度中）（RHSA-2020：5528）	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	medium
144379	RHEL 7：RHEL 7 上的 Red Hat Single Sign-On 7.4.4 安全性更新 (低) (RHSA-2020: 5527)	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	medium
144391	RHEL 8：RHEL 8 上的 Red Hat Single Sign-On 7.4.4 安全性更新 (低) (RHSA-2020: 5528)	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	medium
144379	RHEL 7：RHEL 7 上的 Red Hat Single Sign-On 7.4.4 安全更新（低）(RHSA-2020: 5527)	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	medium
144391	RHEL 8：RHEL 8 上的 Red Hat Single Sign-On 7.4.4 安全更新（低）(RHSA-2020: 5528)	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium