CVE-2020-10734

Name of the Vulnerable Software and Affected Versions keycloak versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes

Description A vulnerability was found in the way keycloak handles the OIDC logout endpoint, which does not have CSRF protection. The highest threat from this vulnerability is to system availability.

Recommendations For versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes, consider disabling the OIDC logout endpoint as a temporary workaround until a patch is available. Restrict access to the OIDC logout endpoint to minimize the risk of exploitation. Avoid using the OIDC logout endpoint until the issue is resolved.