{"timestamp":"2024-04-23T18:37:10.567431Z","id":"CVE-2024-1132","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"defaultStatus":"unaffected","collectionURL":"https://github.com/keycloak/keycloak","packageName":"keycloak","versions":[{"version":"21.1.0","lessThan":"22.0.10","versionType":"semver","status":"affected"},{"version":"23.0.0","lessThan":"24.0.3","versionType":"semver","status":"affected"}]},{"vendor":"Red Hat","product":"Migration Toolkit for Runtimes 1 on RHEL 8","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"mtr/mtr-operator-bundle","cpes":["cpe:/a:redhat:migration_toolkit_runtimes:1.0::el8"],"versions":[{"version":"1.2-23","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Migration Toolkit for Runtimes 1 on RHEL 8","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"mtr/mtr-rhel8-operator","cpes":["cpe:/a:redhat:migration_toolkit_runtimes:1.0::el8"],"versions":[{"version":"1.2-15","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Migration Toolkit for Runtimes 1 on RHEL 8","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"mtr/mtr-web-container-rhel8","cpes":["cpe:/a:redhat:migration_toolkit_runtimes:1.0::el8"],"versions":[{"version":"1.2-16","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Migration Toolkit for Runtimes 1 on RHEL 8","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"mtr/mtr-web-executor-container-rhel8","cpes":["cpe:/a:redhat:migration_toolkit_runtimes:1.0::el8"],"versions":[{"version":"1.2-14","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"MTA-6.2-RHEL-9","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"mta/mta-windup-addon-rhel9","cpes":["cpe:/a:redhat:migration_toolkit_applications:6.2::el8","cpe:/a:redhat:migration_toolkit_applications:6.2::el9"],"versions":[{"version":"6.2.3-2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat AMQ Broker 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","cpes":["cpe:/a:redhat:amq_broker:7.10"]},{"vendor":"Red Hat","product":"Red Hat AMQ Broker 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"keycloak","cpes":["cpe:/a:redhat:amq_broker:7.11"]},{"vendor":"Red Hat","product":"Red Hat AMQ Broker 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","cpes":["cpe:/a:redhat:amq_broker:7.12"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 22","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhbk/keycloak-operator-bundle","cpes":["cpe:/a:redhat:build_keycloak:22::el9"],"versions":[{"version":"22.0.10-1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 22","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhbk/keycloak-rhel9","cpes":["cpe:/a:redhat:build_keycloak:22::el9"],"versions":[{"version":"22-13","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 22","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhbk/keycloak-rhel9-operator","cpes":["cpe:/a:redhat:build_keycloak:22::el9"],"versions":[{"version":"22-16","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 22.0.10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"keycloak","cpes":["cpe:/a:redhat:build_keycloak:22"]},{"vendor":"Red Hat","product":"Red Hat Single Sign-On 7.6 for RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rh-sso7-keycloak","cpes":["cpe:/a:redhat:red_hat_single_sign_on:7.6::el7"],"versions":[{"version":"0:18.0.13-1.redhat_00001.1.el7sso","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Single Sign-On 7.6 for RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rh-sso7-keycloak","cpes":["cpe:/a:redhat:red_hat_single_sign_on:7.6::el8"],"versions":[{"version":"0:18.0.13-1.redhat_00001.1.el8sso","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Single Sign-On 7.6 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rh-sso7-keycloak","cpes":["cpe:/a:redhat:red_hat_single_sign_on:7.6::el9"],"versions":[{"version":"0:18.0.13-1.redhat_00001.1.el9sso","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"RHEL-8 based Middleware Containers","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rh-sso-7/sso76-openshift-rhel8","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"versions":[{"version":"7.6-46","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"RHSSO 7.6.8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rh-sso7-keycloak","cpes":["cpe:/a:redhat:red_hat_single_sign_on:7.6"]},{"vendor":"Red Hat","product":"Red Hat build of Apicurio Registry 2","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"keycloak","cpes":["cpe:/a:redhat:service_registry:2"]},{"vendor":"Red Hat","product":"Red Hat build of Quarkus","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"org.keycloak/keycloak-core","cpes":["cpe:/a:redhat:quarkus:2"]},{"vendor":"Red Hat","product":"Red Hat build of Quarkus","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"org.keycloak/keycloak-core","cpes":["cpe:/a:redhat:quarkus:3"]},{"vendor":"Red Hat","product":"Red Hat Data Grid 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"org.wildfly.security-wildfly-elytron-parent","cpes":["cpe:/a:redhat:jboss_data_grid:8"]},{"vendor":"Red Hat","product":"Red Hat Decision Manager 7","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"keycloak","cpes":["cpe:/a:redhat:jboss_enterprise_brms_platform:7"]},{"vendor":"Red Hat","product":"Red Hat Fuse 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"keycloak","cpes":["cpe:/a:redhat:jboss_fuse:7"]},{"vendor":"Red Hat","product":"Red Hat JBoss Data Grid 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"keycloak","cpes":["cpe:/a:redhat:jboss_data_grid:7"]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 6","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"keycloak","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:6"]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"keycloak-core","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:7"]},{"vendor":"Red Hat","product":"Red Hat Process Automation 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"keycloak","cpes":["cpe:/a:redhat:jboss_enterprise_bpms_platform:7"]}]