Jonathan Christison

Name of the Vulnerable Software and Affected Versions: openjdk versions 1.8 through 11 Description: An insecure modification flaw in the `/etc/passwd` file allows an attacker with access to the container to modify the `/etc/passwd` and escalate their privileges. The highest threat from this issue is to confidentiality, integrity, as well as system availability. Recommendations: For openjdk versions 1.8 through 11, consider restricting access to the `/etc/passwd` file to minimize the risk of exploitation. As a temporary workaround, limit privileges within the container to prevent escalation. At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: Red Hat AMQ versions 7 Description: A flaw in the AMQ Broker discloses JDBC encrypted usernames and passwords in the application logfile when using the jdbc persistence functionality. Recommendations: For Red Hat AMQ version 7, update the configuration to exclude sensitive information from the application logfile, or consider disabling the jdbc persistence functionality until a fix is available.

**Name of the Vulnerable Software and Affected Versions** Keycloak versions 7.x **Description** A vulnerability was found in Keycloak when configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server, allowing user authentication to succeed even with an invalid password. The issue is related to errors in the implementation of the authentication procedure. This could potentially allow a remote attacker to elevate their privileges. **Recommendations** For Keycloak version 7.x, consider disabling the use of StartTLS with LDAP user federation until a patch is available, and ensure that SSL/TLS is used instead. Restrict access to the LDAP server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.