Beveiligingsadvies

CVE-2021-3424

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-06-01 18:43:33
Laatst bijgewerkt 2024-08-03 16:53:17
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible. A malicious user can register himself with a name already registered and trick admin to grant him extra privileges.