This vulnerability arises from a flaw in Picketlink's SP signature validation within Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7. Specifically, a SAML response containing zero assertion elements matching the signature check can be exploited by an attacker to forge a SAML response, thereby authenticating as any principal with any roles on the protected application. The CVSS v3.1 base score is 8.1, indicating high severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, and high confidentiality and integrity impact. Red Hat has released version 7.4.25 as a security update to fix this issue.

An attacker can forge a SAML response due to improper signature verification, allowing unauthorized authentication as any principal with any roles on the protected application. This compromises confidentiality and integrity but does not affect availability. The vulnerability has a high CVSS score of 8.1, reflecting significant potential impact on affected systems.

Red Hat has released an official security update in Red Hat JBoss Enterprise Application Platform version 7.4.25 that addresses this vulnerability. Users should upgrade to version 7.4.25 or later to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.