Red Hat Single Sign-on 7.3.3
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:single_sign-on:7.3.3:*:*:*:*:*:*:*
part: a version: 7.3.3 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Single Sign On (2da82ce9-a16b-5290-b161-4a01040f7fcb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-10201 |
vulnerable | 2026-06-08 05:12:22.511595 |
Details available
HIGH (8.1)
It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the <Signature> sections, the message is still accepted, and the message can be modified. An attacker could use this flaw to impersonate other users and gain access to sensitive information.
Published: 2019-08-14T16:09:39.000Z
Updated: 2024-08-04T22:17:19.324Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.