CVE-2018-14637

    Dashboard / Vulnerabilities / CVE-2018-14637

    CVE-2018-14637

    Published: 30 Nov 2018Last Modified: 7 Aug 2026

    Summary:

    Details: The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions. An attacker can exploit this vulnerability to perform a replay attack.

    References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14637

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -176c9a173de8f727b3e255da4ab7dd15daa5a3fe

    Affected versions

    2.4.0.Test

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High