GHSA-c77r-6f64-478q

ghsaUSosv

keycloak-core discloses system properties

view advisory published 2018-10-18Licence: CC-BY-4.0

It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the "InResponseTo" field in the response.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-2582US	medium6.5	2.43% (84th)	—	2018-07-26
It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. Th…

references

External citations — patches, advisories, analysis.

https://github.com/advisories/GHSA-c77r-6f64-478qADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2017-2582ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan