Поиск уязвимостей
Количество 6
Количество 6
CVE-2026-0871
A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the "Only administrators can view" setting for unmanaged attributes, allowing them to modify these attributes. This improper access control can lead to unauthorized changes to user profiles, even when the system is configured to restrict such modifications.
CVE-2026-0871
A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the "Only administrators can view" setting for unmanaged attributes, allowing them to modify these attributes. This improper access control can lead to unauthorized changes to user profiles, even when the system is configured to restrict such modifications.
CVE-2026-0871
A flaw was found in Keycloak. An administrator with `manage-users` per ...
GHSA-v4jw-m6rm-399h
Keycloak Server Private SPI: Improper Access Control Allows Administrators to Bypass Attribute Visibility Restrictions and Modify Unmanaged User Profile Attributes
ALT-PU-2025-12843
ALT-PU-2025-12843: package `keycloak` update to version 26.4.0-alt1
ALT-PU-2025-13422
ALT-PU-2025-13422: package `keycloak` update to version 26.4.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-0871 A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the "Only administrators can view" setting for unmanaged attributes, allowing them to modify these attributes. This improper access control can lead to unauthorized changes to user profiles, even when the system is configured to restrict such modifications. | CVSS3: 4.9 | 0% Низкий | почти 2 года назад |
 | CVE-2026-0871 A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the "Only administrators can view" setting for unmanaged attributes, allowing them to modify these attributes. This improper access control can lead to unauthorized changes to user profiles, even when the system is configured to restrict such modifications. | CVSS3: 4.9 | 0% Низкий | 9 месяцев назад |
| CVE-2026-0871 A flaw was found in Keycloak. An administrator with `manage-users` per ... | CVSS3: 4.9 | 0% Низкий | 9 месяцев назад |
| GHSA-v4jw-m6rm-399h Keycloak Server Private SPI: Improper Access Control Allows Administrators to Bypass Attribute Visibility Restrictions and Modify Unmanaged User Profile Attributes | CVSS3: 4.9 | 0% Низкий | 9 месяцев назад |
| ALT-PU-2025-12843 ALT-PU-2025-12843: package `keycloak` update to version 26.4.0-alt1 | CVSS3: 7.5 | около 1 года назад | |
| ALT-PU-2025-13422 ALT-PU-2025-13422: package `keycloak` update to version 26.4.0-alt1 | CVSS3: 8.2 | около 1 года назад |
Уязвимостей на страницу