VulnerabilityModified
CVE-2021-3827
A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed.
MEDIUM 6.8EPSS 1.09%
Does this matter?
Lower severity and a low EPSS score (1.09%). Track it; it rarely justifies an emergency change on its own.
Description
A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity.
- CVSS 3.1
- 6.8 MEDIUMCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
- EPSS
- 1.09% probability · 63th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- redhat/keycloak · redhat/single sign-on · redhat/openshift container platform
- Source
- secalert@redhat.com
References
- https://access.redhat.com/security/cve/CVE-2021-3827Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2007512Issue Tracking, Vendor Advisory
- https://github.com/keycloak/keycloak/commit/44000caaf5051d7f218d1ad79573bd3d175cad0dPatch, Third Party Advisory
- https://github.com/keycloak/keycloak/security/advisories/GHSA-4pc7-vqv5-5r3vThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2021-3827Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2007512Issue Tracking, Vendor Advisory
- https://github.com/keycloak/keycloak/commit/44000caaf5051d7f218d1ad79573bd3d175cad0dPatch, Third Party Advisory
- https://github.com/keycloak/keycloak/security/advisories/GHSA-4pc7-vqv5-5r3vThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.