GHSA-f32v-vf79-p29qMediumCVSS 6.5

Improper authorization in Keycloak

Published
April 27, 2022
Last Modified
January 30, 2023

🔗 CVE IDs covered (1)

CVE-2022-1466 →

📋 Description

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.

🎯 Affected products1

  • maven/org.keycloak:keycloak-core:< 17.0.1

🔗 References (5)