Accepted
by @LeSuisse Activity log
- Created automatic suggestion
- @LeSuisse accepted
Keycloak: unguarded admin rest api endpoints allows low privilege users to use administrative functionalities
A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.
Affected products
keycloak
- <24.0.5
Red Hat Single Sign-On 7
Red Hat Build of Keycloak
org.keycloak-keycloak-parent
Package maintainers
-
@ngerstle Nicholas Gerstle <ngerstle@gmail.com>
-
@NickCao Nick Cao <nickcao@nichi.co>
-
@talyz Kim Lindberger <kim.lindberger@gmail.com>