CVE-2021-3827
published 2022-08-23CVE-2021-3827: A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can…
PriorityP344medium6.8CVSS 3.1
AVNACHPRLUINSUCHIHAN
EPSS
1.11%
65.6th percentile
A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | keycloak | < 18.0.0 | 18.0.0 |
| redhat | keycloak | — | — |
| redhat | openshift_container_platform | — | — |
| redhat | openshift_container_platform | — | — |
| redhat | single_sign-on | — | — |
| redhat | single_sign-on | — | — |
CVSS provenance
nvdv3.16.8MEDIUMCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
ECP SAML binding bypasses authentication flows
ghsa·2022-04-27
CVE-2021-3827 [HIGH] CWE-287 ECP SAML binding bypasses authentication flows
ECP SAML binding bypasses authentication flows
### Description
A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity.
OSV
ECP SAML binding bypasses authentication flows
osv·2022-04-27
CVE-2021-3827 [HIGH] ECP SAML binding bypasses authentication flows
ECP SAML binding bypasses authentication flows
### Description
A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity.
Red Hat
keycloak-server-spi-private: ECP SAML binding bypasses authentication flows
vendor_redhat·2021-09-02·CVSS 6.8
CVE-2021-3827 [MEDIUM] CWE-287 keycloak-server-spi-private: ECP SAML binding bypasses authentication flows
keycloak-server-spi-private: ECP SAML binding bypasses authentication flows
A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity.
A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentia
No detection rules found.
No public exploits indexed.
https://access.redhat.com/security/cve/CVE-2021-3827https://bugzilla.redhat.com/show_bug.cgi?id=2007512https://github.com/keycloak/keycloak/commit/44000caaf5051d7f218d1ad79573bd3d175cad0dhttps://github.com/keycloak/keycloak/security/advisories/GHSA-4pc7-vqv5-5r3vhttps://access.redhat.com/security/cve/CVE-2021-3827https://bugzilla.redhat.com/show_bug.cgi?id=2007512https://github.com/keycloak/keycloak/commit/44000caaf5051d7f218d1ad79573bd3d175cad0dhttps://github.com/keycloak/keycloak/security/advisories/GHSA-4pc7-vqv5-5r3v
2022-08-23
Published