CVE-2024-3656

Publication date

2024-10-09 18:59:11

Family

redhat

State

PUBLISHED

Description

A flaw was found in Keycloak. Certain endpoints in Keycloaks admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.