Beveiligingsadvies

CVE-2025-14082

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-10 09:04:51
Laatst bijgewerkt 2026-04-19 23:14:08
Toegewezen door redhat
CVSS-score 2.7
Status PUBLISHED

Beschrijving

A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/{realm}/roles endpoint.