RHSA-2022:0034HighCVSS 8.3

Red Hat Security Advisory: security update of rh-sso-7/sso75 container images for IBM P/Z

Published
January 5, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2021-4133 →

📋 Description

CVE-2021-4133 — Keycloak: Incorrect authorization allows unpriviledged users to create other users

🎯 Affected products2

  • Middleware Containers for OpenShift
  • rh-sso-7/sso7-rhel8-operator-bundle@sha256:9fcdfa4615b91a5bb919aff71fc4df046365b2ee6d540b5f5f47f9ccaeb9877c_amd64 as a component of Middleware Containers for OpenShift

✅ Remediation

The RHEL-8 based Middleware Containers container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container Catalog (see References). Dockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally. Workaround: Access to the user-creation functionality in the REST endpoint can be deactivated using CLI commands in undertow. run: bin/jboss-cli.sh --connect /subsystem=undertow/configuration=filter/expression-filter=keycloakPathOverrideUsersCreateEndpoint:add( \ expression="(regex('^/auth/admin/realms/(.*)/users$') and method(POST))-> response-code(400)" \ ) /subsystem=undertow/server=default-server/host=default-host/filter-ref=keycloakPathOverrideUsersCreateEndpoint:add()

🔗 References (4)