Security Advisory

CVE-2019-14832

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-10-15 18:13:17

Last updated 2024-08-05 00:26:39

Assigner redhat

State PUBLISHED

Description

A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could use this flaw to access unauthorized information or to carry out further attacks.

← Browse all CVEs View on cve.org ↗