← CVE Intelligence

CVE-2021-3424

n/a / keycloak PUBLISHED

Description (CNA)

A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible. A malicious user can register himself with a name already registered and trick admin to grant him extra privileges.

Affected (CNA)

Vendor / productVersions
n/a / keycloakaffected as shipped in Red Hat Single Sign-On 7.4

CWE

CWE-287

References

ADP enrichment

CVE

No English description supplied.