title: Red Hat Security Advisory: Red Hat Single Sign-On 7.3.4 security update on RHEL 8
description: undertow: Information leak in requests for directories without trailing slashes jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server. jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. jackson-databind: default typing mishandling leading to remote code execution keycloak: adapter endpoints are exposed via arbitrary URLs keycloak: cross-realm user access auth bypass
cpes: cpe:/a:redhat:red_hat_single_sign_on:7::el8