title: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 9
description: keycloak: impersonation and lockout possible through incorrect handling of email trust bouncycastle: potential  blind LDAP injection attack using a self-signed certificate HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
cpes: cpe:/a:redhat:red_hat_single_sign_on:7.6::el9