High severity · published Sep 9, 2024
CVE-2024-7341
Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters
7.1
CVSS
0.8%
EPSS
No
On KEV
Description
A session fixation issue was discovered in the SAML adapters provided by Keycloak. The session ID and JSESSIONID cookie are not changed at login time, even when the turnOffChangeSessionIdOnLogin option is configured. This flaw allows an attacker who hijacks the current session before authentication to trigger session fixation.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RB
RHEL-8 based Middleware Containers · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Single Sign-On 7.6 for RHEL 7 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Single Sign-On 7.6 for RHEL 8 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Single Sign-On 7.6 for RHEL 9 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat build of Keycloak 22 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat build of Keycloak 24 · Red Hat
All versions, or not specified · source: vendor
BO
Build OF Keycloak · Redhat
22.0 before 22.0.12; 24.0 before 24.0.7 · source: NVD
KE
Keycloak · Redhat
through 25.0.2 · source: NVD
SS
Single Sign-on · Redhat
7.6 before 7.6.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-7341
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-7341
Mailing List
https://access.redhat.com/errata/RHSA-2024:6493
Mailing List
https://access.redhat.com/errata/RHSA-2024:6494
Mailing List
https://access.redhat.com/errata/RHSA-2024:6495
Mailing List
https://access.redhat.com/errata/RHSA-2024:6497
Mailing List
https://access.redhat.com/errata/RHSA-2024:6499
Mailing List
https://access.redhat.com/errata/RHSA-2024:6500
More from Red Hat build of Keycloak 22
7.5
CVE-2024-4540
Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie
7.4
CVE-2024-1249
Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos
6.5
CVE-2024-4629
Keycloak: potential bypass of brute force protection
6.0
CVE-2023-6717
Keycloak: xss via assertion consumer service url in saml post-binding flow