Description (CNA)
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and receive distinct Central authentication tokens for the mapped identity.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / Red Hat Advanced Cluster Security for Kubernetes 4.11 | unaffected 1792492060 before * |
| Red Hat / Red Hat Advanced Cluster Security 4 | affected |
CWE
CWE-294
References
- https://access.redhat.com/errata/RHSA-2026:85932
- https://access.redhat.com/security/cve/CVE-2026-103314
- https://bugzilla.redhat.com/show_bug.cgi?id=2543879
ADP enrichment
No English description supplied.
No references supplied.