CVE-2024-8698

CVSS V2 None CVSS V3 None
Description
A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.
Overview
  • CVE ID
  • CVE-2024-8698
  • Assigner
  • redhat
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-09-19T15:48:18.464Z
  • Last Modified Date
  • 2024-09-19T19:49:18.681Z
Weakness Enumerations
CWE URL
CWE-347 http://cwe.mitre.org/data/definitions/347.html
References
Reference URL Reference Tags
https://access.redhat.com/errata/RHSA-2024:6878 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6879 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6880 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6882 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6886 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6887 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6888 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6889 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:6890 vendor-advisory x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-8698 vdb-entry x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2311641 issue-tracking x_refsource_REDHAT
https://github.com/keycloak/keycloak/blob/main/saml-core/src/main/java/org/keycloak/saml/processing/core/util/XMLSignatureUtil.java#L415
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-8698
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8698
History
Created Old Value New Value Data Type Notes
2024-10-06 05:13:32 Added to TrackCVE