CVE-2024-3656

Fixed upstream EPSS 3%CVSS 8.1

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.

Published 2024-10-09 · CVE record · OSV

Products: Red Hat Build of Keycloak, Red Hat Single Sign-On 7, Red Hat JBoss Enterprise Application Platform 8

Fixed upstream