Beveiligingsadvies

CVE-2026-4633

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-23 10:53:35
Laatst bijgewerkt 2026-04-01 14:38:10
Toegewezen door redhat
CVSS-score 3.7
Status PUBLISHED

Beschrijving

A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login flow when Organizations are enabled. This vulnerability allows an attacker to determine the existence of users, leading to information disclosure through user enumeration.