CVE-2022-1466

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-1466
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1466.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-1466
Aliases
Published
2022-04-26T18:33:22Z
Modified
2026-07-16T03:46:10.550073864Z
Summary
[none]
Details

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.

Database specific 
{
    "cwe_ids": [
        "CWE-863"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1466.json",
    "cna_assigner": "redhat",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "rhsso 7.5.0.GA"
                },
                {
                    "last_affected": "rhsso 7.5.0.GA"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/keycloak/keycloak

Affected ranges

Type
GIT
Repo
https://github.com/keycloak/keycloak
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e7d2a32e9b9b2723da19b4920d84c243e8ef8c05
Database specific 
{
    "cpe": "cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "17.0.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

1.*
1.0-alpha-1
1.0-alpha-1-12062013
1.0-alpha-2
1.0-alpha-3
1.0-beta-1
1.0-beta-2
1.0-beta-4
1.0-final
1.0-rc-1
1.0.0.Final
1.1.0.Beta2
1.3.0.Final
17.*
17.0.0-6
2.*
2.4.0.Test

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1466.json"