title: Red Hat Security Advisory: Red Hat support for Spring Boot 2.1.12 security and bug fix update
description: tomcat: Apache Tomcat HTTP/2 DoS keycloak: session hijack using the user access token keycloak: missing signatures validation on CRL used to verify client certificates keycloak: CSRF check missing in My Resources functionality in the Account Console keycloak: SAML broker does not check existence of signature on document allowing any user impersonation keycloak: cross-realm user access auth bypass
cpes: cpe:/a:redhat:openshift_application_runtimes:1.0