com.eurodyn.qlack2.util:qlack2-util-sso (>=2.3.5, <=2.3.19), org.bedework.deploy:bw-wf-feature-pack (>=4.1.0, <=5.0.0) +50 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (>=1.2.0.cr1, <=17.0.1)

org.keycloak:keycloak-saml-core MAVEN version =1.2.0.cr1, =2.3.5, =4.1.0, =4.0.3, =12.0.0, =1.2.0.cr1, =1.2.0.cr1, =15.1.0, =12.0.0, =12.0.0, =12.0.0, =1.9.2.final, =1.6.0.final, =3.4.2.final, =3.4.2.final, =11.0.0, =15.0.2 and more Source cves: CVE-2021-3827 Source advisory: MEND:CVE-2021-3827...

CVE-2021-3827

CVE-2021-3827 concerns Keycloak where the default ECP binding flow can bypass other authentication flows, enabling an attacker to bypass MFA by sending a SOAP AuthnRequest with an Authorization header containing user credentials. Exploitation affects confidentiality and integrity as described in ...

org.keycloak:keycloak-api-docs-dist (12.0.2), org.keycloak:keycloak-dependencies-server-all (12.0.2) +29 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (12.0.2)

org.keycloak:keycloak-saml-core MAVEN version 12.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 12.0.2 - org.keycloak:keycloak-dependencies-server-all 12.0....

org.keycloak:keycloak-api-docs-dist (12.0.3), org.keycloak:keycloak-dependencies-server-all (12.0.3) +29 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (12.0.3)

org.keycloak:keycloak-saml-core MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 12.0.3 - org.keycloak:keycloak-dependencies-server-all 12.0....

org.keycloak:keycloak-api-docs-dist (13.0.0), org.keycloak:keycloak-dependencies-server-all (13.0.0) +29 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (13.0.0)

org.keycloak:keycloak-saml-core MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 13.0.0 - org.keycloak:keycloak-dependencies-server-all 13.0....

org.keycloak:keycloak-api-docs-dist (13.0.1), org.keycloak:keycloak-dependencies-server-all (13.0.1) +29 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (13.0.1)

org.keycloak:keycloak-saml-core MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 13.0.1 - org.keycloak:keycloak-dependencies-server-all 13.0....

org.keycloak:keycloak-api-docs-dist (15.1.1), org.keycloak:keycloak-dependencies-server-all (15.1.1) +28 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (15.1.1)

org.keycloak:keycloak-saml-core MAVEN version 15.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 15.1.1 - org.keycloak:keycloak-dependencies-server-all 15.1....

org.keycloak:keycloak-api-docs-dist (16.0.0), org.keycloak:keycloak-dependencies-server-all (16.0.0) +27 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (16.0.0)

org.keycloak:keycloak-saml-core MAVEN version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 16.0.0 - org.keycloak:keycloak-dependencies-server-all 16.0....

org.keycloak:keycloak-dependencies-server-all (8.0.2), org.keycloak:keycloak-saml-adapter-api-public (8.0.2) +23 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (8.0.2)

org.keycloak:keycloak-saml-core MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 8.0.2 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-broker-saml (1.2.0.final), org.keycloak:keycloak-dependencies-server-all (1.2.0.final) +1 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (1.2.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.2.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-broker-saml (1.7.0.cr1), org.keycloak:keycloak-dependencies-server-all (1.7.0.cr1) +19 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (1.7.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 1.7.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.7.0.cr1 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-broker-saml (1.8.0.alpha1), org.keycloak:keycloak-dependencies-server-all (1.8.0.alpha1) +19 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (1.8.0.alpha1)

org.keycloak:keycloak-saml-core MAVEN version 1.8.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.0.alpha1 -...

org.keycloak:keycloak-broker-saml (1.8.1.final), org.keycloak:keycloak-dependencies-server-all (1.8.1.final) +19 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (1.8.1.final)

org.keycloak:keycloak-saml-core MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.1.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-broker-saml (1.8.0.cr3), org.keycloak:keycloak-dependencies-server-all (1.8.0.cr3) +19 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (1.8.0.cr3)

org.keycloak:keycloak-saml-core MAVEN version 1.8.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.0.cr3 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-saml-adapter-api-public (4.0.0.final), org.keycloak:keycloak-saml-adapter-core (4.0.0.final) +25 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (4.0.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.0.0.final -...

org.keycloak:keycloak-saml-adapter-api-public (4.1.0.final), org.keycloak:keycloak-saml-adapter-core (4.1.0.final) +25 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (4.1.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.1.0.final -...

org.keycloak:keycloak-dependencies-server-all (7.0.0), org.keycloak:keycloak-saml-adapter-api-public (7.0.0) +23 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (7.0.0)

org.keycloak:keycloak-saml-core MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 7.0.0 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-dependencies-server-all (9.0.0), org.keycloak:keycloak-saml-adapter-api-public (9.0.0) +23 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (9.0.0)

org.keycloak:keycloak-saml-core MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 9.0.0 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-dependencies-server-all (10.0.0), org.keycloak:keycloak-saml-adapter-api-public (10.0.0) +23 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (10.0.0)

org.keycloak:keycloak-saml-core MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.0 -...

org.keycloak:keycloak-dependencies-server-all (10.0.1), org.keycloak:keycloak-saml-adapter-api-public (10.0.1) +23 more potentially affected by CVE-2021-3827 via org.keycloak:keycloak-saml-core (10.0.1)

org.keycloak:keycloak-saml-core MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.1 -...