CyberRota Analysis
AI-GeneratedKeycloak's SAML broker component is vulnerable when configured with the IdP-Initiated flow, as it does not enforce the OneTimeUse condition in SAML assertions. This flaw allows attackers to replay valid, unused assertions, potentially leading to session hijacking and unauthorized access to user accounts. Organizations utilizing Keycloak for identity and access management should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in the SAML broker component of Keycloak, an identity and access management solution. When configured as a SAML broker using the IdP-Initiated flow, Keycloak fails to enforce the OneTimeUse condition in SAML assertions. This allows an attacker who captures a valid, unused assertion to replay it multiple times. Successful exploitation could allow an attacker to hijack a user's session and gain unauthorized access to the system as that user.
Related CVEs
Other vulnerabilities affecting the same vendor(s)