Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS00cGM3LXZxdjUtNXIzds1BTw

ECP SAML binding bypasses authentication flows

Description

A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity.

Permalink: https://github.com/advisories/GHSA-4pc7-vqv5-5r3v
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00cGM3LXZxdjUtNXIzds1BTw
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: about 2 years ago
Updated: over 1 year ago

CVSS Score: 8.1
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Identifiers: GHSA-4pc7-vqv5-5r3v, CVE-2021-3827
References:

• https://github.com/keycloak/keycloak/security/advisories/GHSA-4pc7-vqv5-5r3v
• https://nvd.nist.gov/vuln/detail/CVE-2021-3827
• https://github.com/keycloak/keycloak/commit/44000caaf5051d7f218d1ad79573bd3d175cad0d
• https://access.redhat.com/security/cve/CVE-2021-3827
• https://bugzilla.redhat.com/show_bug.cgi?id=2007512
• https://github.com/advisories/GHSA-4pc7-vqv5-5r3v

Repository: https://github.com/keycloak/keycloak
Blast Radius: 19.0

Affected Packages