CVE-2024-3656 — Keycloak: unguarded admin rest api endpoints allows low privilege users to use administrative functionalities
A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perfor…
Published: 2024-10-09 · CVSS: 8.1 · CVSS 3.1
A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7