CVE-2016-8629

{"containers": {"cna": {"affected": [{"product": "Keycloak", "vendor": "Red Hat, Inc.", "versions": [{"status": "affected", "version": "2.4.0"}]}], "datePublic": "2017-04-04T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service account authentication could use this flaw to bypass normal permissions and delete users in a separate realm."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-284", "description": "CWE-284", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2018-03-13T09:57:01.000Z", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"name": "RHSA-2017:0876", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://rhn.redhat.com/errata/RHSA-2017-0876.html"}, {"name": "1038180", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1038180"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388988"}, {"name": "97392", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/97392"}, {"name": "RHSA-2017:0873", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2017:0873"}, {"name": "RHSA-2017:0872", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "https://access.redhat.com/errata/RHSA-2017:0872"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "DATE_PUBLIC": "2017-04-04T00:00:00", "ID": "CVE-2016-8629", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Keycloak", "version": {"version_data": [{"version_value": "2.4.0"}]}}]}, "vendor_name": "Red Hat, Inc."}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service account authentication could use this flaw to bypass normal permissions and delete users in a separate realm."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-284"}]}]}, "references": {"reference_data": [{"name": "RHSA-2017:0876", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2017-0876.html"}, {"name": "1038180", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1038180"}, {"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1388988", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388988"}, {"name": "97392", "refsource": "BID", "url": "http://www.securityfocus.com/bid/97392"}, {"name": "RHSA-2017:0873", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:0873"}, {"name": "RHSA-2017:0872", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:0872"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T02:27:41.114Z"}, "title": "CVE Program Container", "references": [{"name": "RHSA-2017:0876", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://rhn.redhat.com/errata/RHSA-2017-0876.html"}, {"name": "1038180", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1038180"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388988"}, {"name": "97392", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/97392"}, {"name": "RHSA-2017:0873", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2017:0873"}, {"name": "RHSA-2017:0872", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "https://access.redhat.com/errata/RHSA-2017:0872"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2016-8629", "datePublished": "2018-03-12T15:00:00.000Z", "dateReserved": "2016-10-12T00:00:00.000Z", "dateUpdated": "2024-09-16T17:52:54.232Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "Keycloak", "vendor": "Red Hat, Inc.", "versions": [{"status": "affected", "version": "2.4.0"}]}], "source": "secalert@redhat.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*", "matchCriteriaId": "6F942D06-B2AA-47F1-B05E-E05EB6CA1191", "versionEndExcluding": "2.4.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:single_sign_on:7.1:*:*:*:*:*:*:*", "matchCriteriaId": "11FE6021-DBE7-4FFD-B021-F97EF80BDEEA", "vulnerable": true}, {"criteria": "cpe:2.3:a:redhat:single_sign_on:7.2:*:*:*:*:*:*:*", "matchCriteriaId": "0AB839F9-8CE2-4EAE-90F2-2CA55742957E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0", "vulnerable": false}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service account authentication could use this flaw to bypass normal permissions and delete users in a separate realm."}, {"lang": "es", "value": "Red Hat Keycloak, en versiones anteriores a la 2.4.0, no comprobaba correctamente los permisos al gestionar peticiones de eliminaci\u00f3n de usuario de cuenta de servicio enviadas al servidor REST. Un atacante con autenticaci\u00f3n de cuenta de servicio podr\u00eda aprovechar este fallo para omitir permisos normales y eliminar usuarios en un realm separado."}], "id": "CVE-2016-8629", "lastModified": "2026-06-17T00:54:38.570", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 5.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-03-12T15:29:00.210", "references": [{"source": "secalert@redhat.com", "tags": ["Third Party Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2017-0876.html"}, {"source": "secalert@redhat.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/97392"}, {"source": "secalert@redhat.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1038180"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2017:0872"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2017:0873"}, {"source": "secalert@redhat.com", "tags": ["Issue Tracking"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388988"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://rhn.redhat.com/errata/RHSA-2017-0876.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/97392"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1038180"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2017:0872"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://access.redhat.com/errata/RHSA-2017:0873"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388988"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "secalert@redhat.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2017:0876", "cpe": "cpe:/a:redhat:jboss_single_sign_on:7.1", "product_name": "Red Hat Single Sign-On 7.1", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0872", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el6", "package": "rh-sso7-0:1-2.jbcs.el6", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 6", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0872", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el6", "package": "rh-sso7-freemarker-0:2.3.23-1.redhat_2.2.jbcs.el6", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 6", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0872", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el6", "package": "rh-sso7-javapackages-tools-0:3.4.1-5.15.3.jbcs.el6", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 6", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0872", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el6", "package": "rh-sso7-keycloak-0:2.5.5-2.Final_redhat_1.1.jbcs.el6", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 6", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0872", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el6", "package": "rh-sso7-libunix-dbus-java-0:0.8.0-2.jbcs.el6", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 6", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0872", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el6", "package": "rh-sso7-liquibase-0:3.4.1-2.redhat_2.1.jbcs.el6", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 6", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0872", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el6", "package": "rh-sso7-twitter4j-0:4.0.4-1.redhat_3.1.jbcs.el6", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 6", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0872", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el6", "package": "rh-sso7-zxing-0:3.2.1-1.redhat_4.1.jbcs.el6", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 6", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0873", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el7", "package": "rh-sso7-0:1-2.jbcs.el7", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 7", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0873", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el7", "package": "rh-sso7-freemarker-0:2.3.23-1.redhat_2.2.jbcs.el7", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 7", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0873", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el7", "package": "rh-sso7-javapackages-tools-0:3.4.1-5.15.3.jbcs.el7", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 7", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0873", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el7", "package": "rh-sso7-keycloak-0:2.5.5-2.Final_redhat_1.1.jbcs.el7", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 7", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0873", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el7", "package": "rh-sso7-libunix-dbus-java-0:0.8.0-2.jbcs.el7", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 7", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0873", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el7", "package": "rh-sso7-liquibase-0:3.4.1-2.redhat_2.1.jbcs.el7", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 7", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0873", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el7", "package": "rh-sso7-twitter4j-0:4.0.4-1.redhat_3.1.jbcs.el7", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 7", "release_date": "2017-04-04T00:00:00Z"}, {"advisory": "RHSA-2017:0873", "cpe": "cpe:/a:redhat:red_hat_single_sign_on:7::el7", "package": "rh-sso7-zxing-0:3.2.1-1.redhat_4.1.jbcs.el7", "product_name": "Red Hat Single Sign-On 7.1 for RHEL 7", "release_date": "2017-04-04T00:00:00Z"}], "bugzilla": {"description": "keycloak: user deletion via incorrect permissions check", "id": "1388988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1388988"}, "csaw": false, "cvss": {"cvss_base_score": "4.0", "cvss_scoring_vector": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "status": "verified"}, "cvss3": {"cvss3_base_score": "4.3", "cvss3_scoring_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "status": "verified"}, "cwe": "CWE-284", "details": ["Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service account authentication could use this flaw to bypass normal permissions and delete users in a separate realm.", "It was found that keycloak did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service account authentication could use this flaw to bypass normal permissions and delete users in a separate realm."], "name": "CVE-2016-8629", "package_state": [{"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7", "fix_state": "Not affected", "package_name": "keycloak", "product_name": "Red Hat Single Sign-On 7"}], "public_date": "2017-04-04T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2016-8629\nhttps://nvd.nist.gov/vuln/detail/CVE-2016-8629"], "threat_severity": "Moderate"}

{}