CVE-2021-3827

2022-08-2315:52:50

CWE-287

redhat

www.cve.org

keycloak

ecp binding

mfa bypass

soap request

vulnerability

confidentiality

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

52.1%

JSON

A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user’s credentials. The highest threat from this vulnerability is to confidentiality and integrity.

CNA Affected

[
  {
    "product": "keycloak",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in v18.0.0"
      }
    ]
  }
]