Search for packages
purl | pkg:maven/org.keycloak/keycloak-saml-adapter-core@3.4.0.Final |
Next non-vulnerable version | 4.4.0.Final |
Latest non-vulnerable version | 4.4.0.Final |
Risk | 4.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-xcg8-g3tg-aaae
Aliases: CVE-2018-10894 GHSA-xvv8-8wh9-9fh2 |
Improper Certificate Validation It was found that SAML authentication in Keycloak incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks. |
Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |