The vulnerability exists in the keycloak-services component's SAML metadata import process within Red Hat Build of Keycloak. When importing identity provider metadata missing specific key usage attributes, the system disables signature validation for SAML responses despite the presence of a signing certificate. This improper verification of cryptographic signatures (CWE-347) enables an unauthenticated attacker to forge SAML responses and impersonate users, gaining full access to their accounts. Red Hat has assessed this issue as Important due to the potential for unauthenticated account takeover under common configurations. No official fix or mitigation currently meets Red Hat's standards, and users are advised to monitor Red Hat advisories for updates.

An unauthenticated attacker can exploit this vulnerability to forge SAML responses and gain unauthorized access to user accounts by knowing their external identifiers. This results in a complete compromise of confidentiality and integrity of affected user accounts. The vulnerability does not impact availability. The attack complexity is high, and no privileges or user interaction are required for exploitation.

As per the Red Hat advisory, no effective mitigation or patch is currently available that meets the criteria for ease of use, applicability to the widespread installation base, or stability. Users should monitor the official Red Hat advisory for future updates or fixes. Until a fix is released, consider restricting access to the affected service or applying any vendor-recommended temporary controls if available.