What is RHSA-2018:3595?

RHSA-2018:3595 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat Single Sign-On 7.2.5 security and bug fix update

Which CVE IDs does RHSA-2018:3595 cover?

RHSA-2018:3595 covers the following CVE IDs: CVE-2018-10894, CVE-2018-14627, CVE-2018-14637, CVE-2018-14655, CVE-2018-14657, CVE-2018-14658. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2018:3595?

RHSA-2018:3595 has a CVSS v3 base score of 6.1, published by Red Hat Product Security.

Which products are affected by RHSA-2018:3595?

RHSA-2018:3595 affects 1 product, including: Red Hat Single Sign-On 7.2.5 zip.

RHSA-2018:3595MediumCVSS 6.1

Red Hat Security Advisory: Red Hat Single Sign-On 7.2.5 security and bug fix update

Vendor

Red Hat Product Security

Published

November 13, 2018

Last Modified

August 4, 2026

🔗 CVE IDs covered (6)

CVE-2018-10894 →CVE-2018-14627 →CVE-2018-14637 →CVE-2018-14655 →CVE-2018-14657 →CVE-2018-14658 →

📋 Description

CVE-2018-10894 — keycloak: auth permitted with expired certs in SAML client CVE-2018-14627 — JBoss/WildFly: iiop does not honour strict transport confidentiality CVE-2018-14637 — keycloak: expiration not validated in SAML broker consumer endpoint CVE-2018-14655 — keycloak: XSS-Vulnerability with response_mode=form_post CVE-2018-14657 — keycloak: brute force protection not working for the entire login workflow CVE-2018-14658 — keycloak: Open Redirect in Login and Logout

🎯 Affected products1

Red Hat Single Sign-On 7.2.5 zip

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link (you must log in to download the update).

🔗 CVE IDs covered (6)

📋 Description

🎯 Affected products1

✅ Remediation

🔗 References (12)