En resumen
- CVE-2016-8629 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a org.keycloak:keycloak-core, keycloak (redhat), single sign on (redhat).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.9%, mayor que el 79.7% de las vulnerabilidades.
- Solución: actualizar a 2.4.0 o posterior.
Description
Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service account authentication could use this flaw to bypass normal permissions and delete users in a separate realm.
NVD description
Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service account authentication could use this flaw to bypass normal permissions and delete users in a separate realm.
Más vulnerabilidades de org.keycloak:keycloak-core
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free