HIGH 8.1 Maven
ECP SAML binding bypasses authentication flows
GHSA-4pc7-vqv5-5r3v · CVE-2021-3827
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Description
A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity.
References
- WEB https://github.com/keycloak/keycloak/security/advisories/GHSA-4pc7-vqv5-5r3v
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2021-3827
- WEB https://github.com/keycloak/keycloak/commit/44000caaf5051d7f218d1ad79573bd3d175cad0d
- WEB https://access.redhat.com/security/cve/CVE-2021-3827
- WEB https://bugzilla.redhat.com/show_bug.cgi?id=2007512
- PACKAGE https://github.com/keycloak/keycloak
Ready to move
Start Securing
Free, no credit card | First findings in minutes