CVE-2026-3047 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw was found in org.keycloak.broker.saml. When a disabled Security Assertion Markup Language (SAML) client is configured as an Identity Provider (IdP)-initi…
High CVSS: 8.8

CVE-2026-3047

A flaw was found in org.keycloak.broker.saml. When a disabled Security Assertion Markup Language (SAML) client is configured as an Identity Provider (IdP)-initiated broker landing target, it can still complete the login process and establish a Single Sign-On (SSO) session. This allows a remote attacker to gain unauthorized access to other enabled clients without re-authentication, effectively bypassing security restrictions.
Vendor
Redhat
Product
Build Of Keycloak
CWE
CWE-305
Yayın Tarihi
2026-03-05 19:16:18
Güncelleme
2026-03-26 14:20:02
Source Identifier
secalert@redhat.com
KEV Date Added
-

Kategoriler

CWE-305 Build Of Keycloak HIGH Redhat 2026

Referanslar

https://access.redhat.com/errata/RHSA-2026:3925 https://access.redhat.com/errata/RHSA-2026:3926 https://access.redhat.com/errata/RHSA-2026:3947 https://access.redhat.com/errata/RHSA-2026:3948 https://access.redhat.com/security/cve/CVE-2026-3047 https://bugzilla.redhat.com/show_bug.cgi?id=2441966