PT-2021-20407
CVE-2021-3424
·
Published
2021-06-01
·
Updated
2022-04-28
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Red Hat Single Sign-On version 7.4
Description:
A flaw was found in the software where IDN homograph attacks are possible, allowing a malicious user to register with a name already registered and potentially trick an administrator into granting extra privileges.
Recommendations:
For Red Hat Single Sign-On version 7.4, at the moment, there is no information about a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾