CVE-2021-3424: Medium severity redhat Single Sign-on vulnerability
A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible. A malicious user can register himself with a name already registered and trick admin to grant him extra privileges.
Other sources
A flaw was found in keycloak, where IDN homograph attacks are possible. This flaw allows a malicious user to register a name that already exists and then tricking an admin to grant extra privileges. The highest threat from this vulnerability is to integrity.
A flaw was found in keycloak. Internationalized domain name (IDN) homograph attacks may be used to impersonate users.
References:
https://issues.redhat.com/browse/KEYCLOAK-17256
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/rh-sso7-keycloakto a version that resolves this vulnerability.Fixed in 0:9.0.13-1.redhat_00006.1.el6 - Upgrade
Upgrade
redhat/rh-sso7-keycloakto a version that resolves this vulnerability.Fixed in 0:9.0.13-1.redhat_00006.1.el7 - Upgrade
Upgrade
redhat/rh-sso7-keycloakto a version that resolves this vulnerability.Fixed in 0:9.0.13-1.redhat_00006.1.el8 - Upgrade
Upgrade
redhat/keycloakto a version that resolves this vulnerability.Fixed in 18.0.0
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2021-3424?
CVE-2021-3424 is a vulnerability in Keycloak, as shipped in Red Hat Single Sign-On 7.4, that allows IDN homograph attacks.
What is the severity of CVE-2021-3424?
The severity of CVE-2021-3424 is medium with a CVSS score of 5.3.
How does CVE-2021-3424 affect me?
CVE-2021-3424 allows a malicious user to register a name that already exists and trick an admin to grant extra privileges, posing an integrity threat.
How can I fix CVE-2021-3424?
To fix CVE-2021-3424, update the affected software to version 18.0.0 for Keycloak or apply the specific security patches provided by Red Hat for Red Hat Single Sign-On 7.4.
Where can I find more information about CVE-2021-3424?
You can find more information about CVE-2021-3424 on the CVE website, NIST NVD database, GitHub security advisory, Red Hat Bugzilla, and Red Hat errata page.