REDHAT-BUG-2311641: High severity Red Hat Keycloak vulnerability
The SAML signature validation method in Keycloak uses the position of the signature within the XML document to determine if the signature is for the full document or an assertion. This approach can be exploited by attackers to bypass signature validation and perform unauthorized actions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2311641?
The severity of REDHAT-BUG-2311641 is high due to the potential for unauthorized actions resulting from exploited signature validation bypass.
How do I fix REDHAT-BUG-2311641?
To fix REDHAT-BUG-2311641, update to the latest patched version of Red Hat Keycloak as provided in the official advisories.
What are the risks associated with REDHAT-BUG-2311641?
The risks associated with REDHAT-BUG-2311641 include allowing attackers to bypass signature validation and conduct unauthorized operations.
Who is affected by REDHAT-BUG-2311641?
REDHAT-BUG-2311641 affects users of Red Hat Keycloak who rely on SAML for authentication.
When was REDHAT-BUG-2311641 reported?
REDHAT-BUG-2311641 was reported recently and has been addressed in the latest security advisories from Red Hat.