REDHAT-BUG-1410481: Medium severity Red Hat Keycloak vulnerability

Published Jan 5, 2017

Updated

It was found that Picketlink implementation replaces special strings for obtaining attribute values with system property values in SAML messages while parsing. An attacker can misuse this to determine values of system properties at the attacked system by formatting the SAML request ID field to the chosen system property name of his liking, obtaining the property value in "InResponseTo" field in the response.

Upstream bug (for Keycloak):

https://issues.jboss.org/browse/KEYCLOAK-4160

Affected Software

1 affected component

Red Hat Keycloak

Event History

Jan 5, 2017

Data Sourced

via Red Hat·03:31 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1410481?

The severity of REDHAT-BUG-1410481 is classified as important due to potential information disclosure.

How do I fix REDHAT-BUG-1410481?

To fix REDHAT-BUG-1410481, you should update to the latest patched version of Red Hat Keycloak.

What systems are affected by REDHAT-BUG-1410481?

REDHAT-BUG-1410481 affects the Red Hat Build of Keycloak.

Can REDHAT-BUG-1410481 lead to data breaches?

Yes, if exploited, REDHAT-BUG-1410481 can potentially lead to information disclosure which may contribute to data breaches.

What is the impact of exploiting REDHAT-BUG-1410481?

Exploiting REDHAT-BUG-1410481 can allow an attacker to determine system property values through crafted SAML messages.