Lucene search
+L

8 matches found

RedHat Linux
RedHat Linux
added 2026/08/05 4:17 p.m.16 views

keycloak-services: keycloak-services: SAML broker metadata import disables response signature validation

A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...

9.1CVSS5.4AI score0.0018EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/05 4:17 p.m.11 views

keycloak-services: keycloak-services: SAML broker metadata import disables response signature validation

A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...

9.1CVSS5.4AI score0.0018EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/05 2:17 p.m.9 views

CVE-2026-16443

A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...

9.1CVSS0.0018EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/05 1:44 p.m.41 views

CVE-2026-16443 Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation

A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...

7.4CVSS0.0018EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/05 1:44 p.m.16 views

EUVD-2026-53343

A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...

7.4CVSS5.4AI score0.0018EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/05 1:44 p.m.52 views

CVE-2026-16443

CVE-2026-16443 affects Red Hat build of Keycloak: the keycloak-services SAML broker metadata import feature incorrectly disables signature validation for SAML responses when provider metadata lacks certain key usage attributes, even if a signing certificate is supplied. This enables an unauthenti...

9.1CVSS5.4AI score0.0018EPSS
SaveExploits0References6Affected Software1
RedhatCVE
RedhatCVE
added 2026/08/05 1:44 p.m.12 views

CVE-2026-16443

A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...

9.1CVSS5.1AI score0.0018EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2024/10/22 7:13 p.m.23 views

Security Bulletin: IBM Watson Query (Data Virtualization) does not govern all of the columns of a published object

Summary IBM Watson Query Data Virtualization on Cloud Pak for Data integrates with IBM Knowledge Catalog IKC - formerly Watson Knowledge Catalog WKC - to enforce data protection rules on governed objects. When you publish objects from Watson Query to catalogs or projects, only the first n where...

6.5CVSS6.3AI score0.00477EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder