CVE-2021-3424

2021-06-0118:43:33

CWE-287

redhat

raw.githubusercontent.com

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.7%

JSON

A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible. A malicious user can register himself with a name already registered and trick admin to grant him extra privileges.