Privilege escalation via unchecked homograph usernames

Improper authentication in Red Hat Single Sign-On 7.4 allows remote attackers to obtain elevated privileges through a deceptive username. The user-registration path accepts Unicode IDN homographs without detecting that a new username is visually confusable with an existing account. The attacker must create the look-alike account and persuade an administrator to assign it extra privileges; the documented consequence is unauthorized privilege gain.