CVE-2024-3656
CVSS 3.1 Score 8.1 of 10 (high)
Details
Published Oct 9, 2024
Updated: Dec 23, 2024
CWE ID 200
Summary
CVE-2024-3656 is a vulnerability affecting Keycloak's admin REST API. This issue enables low-privilege users to access administrative functionalities through certain endpoints. Consequently, these users can execute actions reserved for administrators, posing a risk of data breaches or system compromise. The vulnerability's discovery may allow unauthorized access to sensitive information and compromise the security of the affected system. Organizations utilizing Keycloak are urged to apply the necessary patches promptly to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.