CVE-2019-10201
Last modified
CVE-2019-10201 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the <Signature> sections, the message is still accepted, and the message can be modified. EPSS estimates a 0.71% chance of exploitation in the next 30 days.
Description
It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the <Signature> sections, the message is still accepted, and the message can be modified. An attacker could use this flaw to impersonate other users and gain access to sensitive information.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Keycloak | <= 6.0.1 |
| Redhat | Single Sign-On | 7.0 |
| Redhat | Single Sign-On | 7.3.3 |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10201Issue Tracking, Mitigation, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10201Issue Tracking, Mitigation, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-10201?
How severe is CVE-2019-10201?
How do I fix CVE-2019-10201?
Are you affected by CVE-2019-10201?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST