CVE-2017-2582

keycloak: SAML request parser replaces special strings with system properties

Published Jul 26, 2018 CVSS 3.0 · 6.5 Medium EPSS 2.4% KEV · Not listed
Description
It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the "InResponseTo" field in the response.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2018-0568 It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the "InResponseTo" field in the response.
Github GHSA Github GHSA GHSA-c77r-6f64-478q keycloak-core discloses system properties
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 5, 2024, 1:55 PM
Reserved
Dec 1, 2016, 12:00 AM
Status
Modified
Published
Jul 26, 2018, 5:29 PM
Modified
Jun 17, 2026, 1:16 AM
Severity
Moderate
Public date
Sep 26, 2017, 12:00 AM