Keycloak: keycloak: information disclosure via saml ecp endpoint
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
probabilidade de exploração
0.3%top 74% das CVEs
exploração observada
nãonenhuma fonte reporta
A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted SOAP requests to the SAML ECP (Security Assertion Markup Language Enhanced Client or Proxy) endpoint with varying client IDs. By observing distinct faultstrings in the responses, the attacker can determine the client's protocol type, leading to information disclosure.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Red Hat · Red Hat build of Keycloak 26.4Red Hat · Red Hat build of Keycloak 26.4.13Red Hat · Red Hat build of Keycloak 26.6Red Hat · Red Hat build of Keycloak 26.6.3Referências
https://access.redhat.com/errata/RHSA-2026:25097https://access.redhat.com/errata/RHSA-2026:25098https://access.redhat.com/errata/RHSA-2026:30049https://access.redhat.com/errata/RHSA-2026:30050https://access.redhat.com/security/cve/CVE-2026-9794https://bugzilla.redhat.com/show_bug.cgi?id=2482461