U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2024-8883

Change History

Initial Analysis by NIST 9/25/2024 1:17:35 PM

Action Type Old Value New Value
Added CVSS V3.1

								
							
							
						
NIST AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:redhat:build_of_keycloak:-:*:*:*:text-only:*:*:*
     *cpe:2.3:a:redhat:openshift_container_platform:4.11:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.9:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:openshift_container_platform_for_ibm_z:4.10:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.9:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.10:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:openshift_container_platform_for_power:4.9:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:openshift_container_platform_for_power:4.10:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:single_sign-on:-:*:*:*:text-only:*:*:*
     *cpe:2.3:a:redhat:single_sign-on:7.6:*:*:*:*:*:*:*
Changed Reference Type
https://access.redhat.com/errata/RHSA-2024:6878 No Types Assigned
https://access.redhat.com/errata/RHSA-2024:6878 Vendor Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2024:6879 No Types Assigned
https://access.redhat.com/errata/RHSA-2024:6879 Vendor Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2024:6880 No Types Assigned
https://access.redhat.com/errata/RHSA-2024:6880 Vendor Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2024:6882 No Types Assigned
https://access.redhat.com/errata/RHSA-2024:6882 Vendor Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2024:6886 No Types Assigned
https://access.redhat.com/errata/RHSA-2024:6886 Vendor Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2024:6887 No Types Assigned
https://access.redhat.com/errata/RHSA-2024:6887 Vendor Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2024:6888 No Types Assigned
https://access.redhat.com/errata/RHSA-2024:6888 Vendor Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2024:6889 No Types Assigned
https://access.redhat.com/errata/RHSA-2024:6889 Vendor Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2024:6890 No Types Assigned
https://access.redhat.com/errata/RHSA-2024:6890 Vendor Advisory
Changed Reference Type
https://access.redhat.com/security/cve/CVE-2024-8883 No Types Assigned
https://access.redhat.com/security/cve/CVE-2024-8883 Vendor Advisory
Changed Reference Type
https://bugzilla.redhat.com/show_bug.cgi?id=2312511 No Types Assigned
https://bugzilla.redhat.com/show_bug.cgi?id=2312511 Issue Tracking, Vendor Advisory
Changed Reference Type
https://github.com/keycloak/keycloak/blob/main/services/src/main/java/org/keycloak/protocol/oidc/utils/RedirectUtils.java No Types Assigned
https://github.com/keycloak/keycloak/blob/main/services/src/main/java/org/keycloak/protocol/oidc/utils/RedirectUtils.java Product