PT-2026-25967 · Keycloak+1 · Keycloak
Oleh Konko
·
Publicado
2026-03-18
·
Atualizado
2026-06-02
·
CVE-2026-2092
CVSS v3.1
7.7
Alta
| Vetor | AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Keycloak (affected versions not specified)
Description
A flaw exists in Keycloak’s Security Assertion Markup Language (SAML) broker endpoint. The endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. This allows the attacker to inject an encrypted assertion for an arbitrary principal, leading to unauthorized access and potential information disclosure. The vulnerable component is the SAML broker endpoint, which processes SAML responses. The attack involves crafting a malicious SAML response and injecting an encrypted assertion for an arbitrary principal.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Keycloak