CVE-2026-3121 in KeyCloak
要約
〜によって MITRE • 2026年03月26日
A flaw was found in Keycloak. An administrator with `manage-clients` permission can exploit a misconfiguration where this permission is equivalent to `manage-permissions`. This allows the administrator to escalate privileges and gain control over roles, users, or other administrative functions within the realm. This privilege escalation can occur when admin permissions are enabled at the realm level.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.