GitHub Advisoryadvisory · Maven

GHSA-c77r-6f64-478q keycloak-core discloses system properties

MEDIUM Published 2018-10-18 Modified 2023-09-07 Official page ↗
Aliases
CVE-2017-2582
Ecosystem
Maven
Packages
org.keycloak:keycloak-core
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200, CWE-201
Reviewed
2020-06-16

Affected packages

• Maven org.keycloak:keycloak-core: < 2.5.1 → fixed in 2.5.1

Description

It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the "InResponseTo" field in the response.

Related

Alias · CVE (1)

  • CVE-2017-2582 It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining… vulnerability

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-201 Insertion of Sensitive Information Into Sent Data weakness

References