Aller au contenu
en Se connecter
6.5 Moyenne

CVE-2025-7784 A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin Permissions(FGAPv2) are…

Description

A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin Permissions(FGAPv2) are enabled. An administrative user with the manage-users role can escalate their privileges to realm-admin due to improper privilege enforcement. This vulnerability allows unauthorized elevation of access rights, compromising the intended separation of administrative duties and posing a security risk to the realm.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat build of Keycloak 26 Versions non publiées
Red Hat build of Keycloak 26.2 26.2 premières → < 26.2-6 26.2-6
Red Hat JBoss Enterprise Application Platform 8 Versions non publiées
Red Hat JBoss Enterprise Application Platform Expansion Pack Versions non publiées
Red Hat Single Sign-On 7 Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat build of Keycloak 26

Les 3 CVE de Red Hat build of Keycloak 26 →
CVE-2025-7365 A flaw was found in Keycloak 7.1 Élevée CVE-2025-3501 A flaw was found in Keycloak 8.2 Élevée
Suivre cette CVE