Описание
A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/{realm}/roles endpoint.
EPSS
Процентиль: 28%
0.00356
Низкий
2.7 Low
CVSS3
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 2.7
redhat
9 месяцев назад
A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/{realm}/roles endpoint.
CVSS3: 2.7
debian
9 месяцев назад
A flaw was found in Keycloak Admin REST (Representational State Transf ...
CVSS3: 2.7
github
9 месяцев назад
Keycloak Admin REST (Representational State Transfer) API does not properly enforce permissions
EPSS
Процентиль: 28%
0.00356
Низкий
2.7 Low
CVSS3
Дефекты
CWE-284