Beveiligingsadvies

CVE-2024-3656

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-09 18:59:11
Laatst bijgewerkt 2025-11-20 07:13:33
Toegewezen door redhat
CVSS-score 8.1
Status PUBLISHED

Beschrijving

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.