Lucene search
+L

1 matches found

OSV
OSV
•added 2026/08/25 12:16 p.m.•18 views

BIT-KEYCLOAK-2026-17048 Keycloak-services: keycloak-services: vault-resolved rotated client secrets leaked via admin rest api

A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients. The issue occurs when the system processes requests for rotated client secrets that are stored in a secure vault. Due to improper boundary enforcement, a delegated administrator with view-only...

5.5CVSS5.8AI score0.00424EPSS
SaveExploits0References5
Rows per page
Query Builder