Описание
A flaw was found in the Keycloak Admin REST API. This vulnerability allows the exposure of backend schema and rules, potentially leading to targeted attacks or privilege escalation via improper access control.
EPSS
Процентиль: 29%
0.00351
Низкий
2.7 Low
CVSS3
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 2.7
redhat
11 месяцев назад
A flaw was found in the Keycloak Admin REST API. This vulnerability allows the exposure of backend schema and rules, potentially leading to targeted attacks or privilege escalation via improper access control.
CVSS3: 2.7
debian
10 месяцев назад
A flaw was found in the Keycloak Admin REST API. This vulnerability al ...
CVSS3: 2.7
github
10 месяцев назад
Keycloak Admin REST API exposes backend schema and rules
CVSS3: 8.1
altlinux
7 месяцев назад
ALT-PU-2026-6040: package `keycloak` update to version 26.5.7-alt1
CVSS3: 8.1
altlinux
7 месяцев назад
ALT-PU-2026-5671: package `keycloak` update to version 26.5.7-alt1
EPSS
Процентиль: 29%
0.00351
Низкий
2.7 Low
CVSS3
Дефекты
CWE-284