title: Red Hat Security Advisory: Red Hat Single Sign-On 7.4.6 security update
description: nodejs-angular: XSS due to regex-based HTML replacement guava: local information disclosure via temporary directory created with unsafe permissions keycloak: reusable "state" parameter at redirect_uri endpoint enables possibility of replay attacks bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible jboss-remoting: Threads hold up forever in the EJB server by suppressing the ack from an EJB client undertow: Possible regression in fix for CVE-2020-10687 wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client
cpes: cpe:/a:redhat:red_hat_single_sign_on:7