PT-2026-56060

Name of the Vulnerable Software and Affected Versions OpenRemote versions prior to 1.24.2 Description An improper access control issue exists in the UserResourceImpl.java file. The get, getUserClientRoles, and getUserRealmRoles methods authorize callers with the read:admin role without verifying ...