CVE-2017-2582CWE-201

It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values…

Medium · published July 26, 2018

CVSS v3.0
6.5
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the "InResponseTo" field in the response.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02426 · 84.0th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2018-07-26T17:00Z
EPSS history
Timeline
  • 26 JUL 17:00Z
    It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values…
    cvelistv5