GitHub Advisoryadvisory · Maven
GHSA-4pc7-vqv5-5r3v ECP SAML binding bypasses authentication flows
HIGH
Official page ↗
- Aliases
- CVE-2021-3827
- Ecosystem
- Maven
- Packages
- org.keycloak:keycloak-saml-core
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-287
- Reviewed
- 2022-04-27
Affected packages
• Maven org.keycloak:keycloak-saml-core: < 18.0.0 → fixed in 18.0.0
Description
Description
A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity.
Related
Alias · CVE (1)
- CVE-2021-3827 A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. vulnerability
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://github.com/keycloak/keycloak/security/advisories/GHSA-4pc7-vqv5-5r3v web
- https://nvd.nist.gov/vuln/detail/CVE-2021-3827 advisory
- https://github.com/keycloak/keycloak/commit/44000caaf5051d7f218d1ad79573bd3d175cad0d web
- https://access.redhat.com/security/cve/CVE-2021-3827 web
- https://bugzilla.redhat.com/show_bug.cgi?id=2007512 web
- https://github.com/keycloak/keycloak package