CVE-2019-14832CWE-863

A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured

Medium · published October 15, 2019

CVSS v3.0
5.0
EPSS
1%
Percentile
44.6
In the wild
Unconfirmed
What it is

A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could use this flaw to access unauthorized information or to carry out further attacks.

The record
Technical detail
CVSS v3.0
5.0 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00540 · 44.6th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2019-10-15T18:13Z
EPSS history
Timeline
  • 15 OCT 18:13Z
    A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured
    cvelistv5