CVE-2016-8609

Synopsis Important: Red Hat Single Sign-On security update Type/Severity Security Advisory: Important Topic A security update is now available for Red Hat Single Sign-On 70 from the Customer PortalRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabili ...

It was found that the keycloak did not implement authentication flow correctly An attacker could use this flaw to construct a phishing URL, from which he could hijack the user's session This could lead to information disclosure, or permit further possible attacks ...