CVE-2021-3827

HIGH8.1EPSS 0.21%

ECP SAML binding bypasses authentication flows

發布日:2022/4/27修改日:2026/3/13

描述

### Description A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity.

受影響套件(1)

Maven/org.keycloak:keycloak-saml-corefrom 0, < 18.0.0

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH8.1	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

參考連結(6)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-3827
PATCHhttps://github.com/keycloak/keycloak
WEBhttps://access.redhat.com/security/cve/CVE-2021-3827
WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=2007512
WEBhttps://github.com/keycloak/keycloak/commit/44000caaf5051d7f218d1ad79573bd3d175cad0d
WEBhttps://github.com/keycloak/keycloak/security/advisories/GHSA-4pc7-vqv5-5r3v