CVE-2018-10894: Medium severity redhat keycloak vulnerability
It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.
Other sources
It was found that SAML authentication in Keycloak incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/org.keycloak:keycloak-servicesto a version that resolves this vulnerability.Fixed in 4.4.0.Final - Upgrade
Upgrade
maven/org.keycloak:keycloak-saml-adapter-coreto a version that resolves this vulnerability.Fixed in 4.4.0.Final - Upgrade
Upgrade
redhat/keycloakto a version that resolves this vulnerability.Fixed in 4.4.0.
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10894?
CVE-2018-10894 has a high severity rating due to its potential to allow unauthorized access through expired certificates.
How do I fix CVE-2018-10894?
To fix CVE-2018-10894, upgrade to Keycloak version 4.4.0.Final or later.
What systems are affected by CVE-2018-10894?
CVE-2018-10894 affects Keycloak versions prior to 4.4.0.Final.
Can CVE-2018-10894 lead to data breaches?
Yes, CVE-2018-10894 can allow a malicious user to access unauthorized data.
Is there a workaround for CVE-2018-10894?
There are no known workarounds for CVE-2018-10894; upgrading is the recommended solution.