Openshift_application_runtimes

Repositories	Unknown: This might be proprietary software.
#Vulnerabilities	33

Date	Id	Summary	Products	Score
2020-03-16	CVE-2019-14887	A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption. This could lead to a leak of the data being passed over the network. Wildfly version 7.2.0.GA, 7.2.3.GA and 7.2.5.CR2 are believed to be vulnerable.	Jboss_data_grid, Jboss_enterprise_application_platform, Jboss_fuse, Openshift_application_runtimes, Single_sign\-On, Wildfly	9.1
2021-02-11	CVE-2020-10734	A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable.	Jboss_fuse, Keycloak, Openshift_application_runtimes, Single_sign\-On	3.3
2020-09-16	CVE-2020-10758	A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified keycloak server, all with a Content-Length header value that exceeds the actual byte count of the request body.	Keycloak, Openshift_application_runtimes, Single_sign\-On	7.5