Keycloak admin REST API Unauthorized Access Vulnerability (CVE-2024-3656)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: CVE-2024-3656 2. Vulnerability Description: Keycloak's admin REST API endpoint is unprotected, allowing low-privilege users to use administrative functions. 3. Report Date: April 10, 2024 4. Reporter: Pedro Sampaio 5. Status: NEW (New) 6. Priority: High 7. Severity: High 8. Affected Component: vulnerability 9. Affected Version: Not specified 10. Affected Operating System: Linux 11. Affected Hardware: All 12. Affected Platform: Not specified 13. Affected Software: Not specified 14. Affected Software Version: Not specified 15. Affected Software Component: Not specified 16. Affected Software Platform: Not specified 17. Affected Software Version: Not specified 18. Affected Software Component: Not specified 19. Affected Software Platform: Not specified 20. Affected Software Version: Not specified 21. Affected Software Component: Not specified 22. Affected Software Platform: Not specified 23. Affected Software Version: Not specified 24. Affected Software Component: Not specified 25. Affected Software Platform: Not specified 26. Affected Software Version: Not specified 27. Affected Software Component: Not specified 28. Affected Software Platform: Not specified 29. Affected Software Version: Not specified 30. Affected Software Component: Not specified 31. Affected Software Platform: Not specified 32. Affected Software Version: Not specified 33. Affected Software Component: Not specified 34. Affected Software Platform: Not specified 35. Affected Software Version: Not specified 36. Affected Software Component: Not specified 37. Affected Software Platform: Not specified 38. Affected Software Version: Not specified 39. Affected Software Component: Not specified 40. Affected Software Platform: Not specified 41. Affected Software Version: Not specified 42. Affected Software Component: Not specified 43. Affected Software Platform: Not specified 44. Affected Software Version: Not specified 45. Affected Software Component: Not specified 46. Affected Software Platform: Not specified 47. Affected Software Version: Not specified 48. Affected Software Component: Not specified 49. Affected Software Platform: Not specified 50. Affected Software Version: Not specified 51. Affected Software Component: Not specified 52. Affected Software Platform: Not specified 53. Affected Software Version: Not specified 54. Affected Software Component: Not specified 55. Affected Software Platform: Not specified 56. Affected Software Version: Not specified 57. Affected Software Component: Not specified 58. Affected Software Platform: Not specified 59. Affected Software Version: Not specified 60. Affected Software Component: Not specified 61. Affected Software Platform: Not specified 62. Affected Software Version: Not specified 63. Affected Software Component: Not specified 64. Affected Software Platform: Not specified 65. Affected Software Version: Not specified 66. Affected Software Component: Not specified 67. Affected Software Platform: Not specified 68. Affected Software Version: Not specified 69. Affected Software Component: Not specified 70. Affected Software Platform: Not specified 71. Affected Software Version: Not specified 72. Affected Software Component: Not specified 73. Affected Software Platform: Not specified 74. Affected Software Version: Not specified 75. Affected Software Component: Not specified 76. Affected Software Platform: Not specified 77. Affected Software Version: Not specified 78. Affected Software Component: Not specified 79. Affected Software Platform: Not specified 80. Affected Software Version: Not specified 81. Affected Software Component: Not specified 82. Affected Software Platform: Not specified 83. Affected Software Version: Not specified 84. Affected Software Component: Not specified 85. Affected Software Platform: Not specified 86. Affected Software Version: Not specified 87. Affected Software Component: Not specified 88. Affected Software Platform: Not specified 89. Affected Software Version: Not specified 90. Affected Software Component: Not specified 91. Affected Software Platform: Not specified 92. Affected Software Version: Not specified 93. Affected Software Component: Not specified 94. Affected Software Platform: Not specified 95. Affected Software Version: Not specified 96. Affected Software Component: Not specified 97. Affected Software Platform: Not specified 98. Affected Software Version: Not specified 99. Affected Software Component: Not specified 100. Affected Software Platform: Not specified 101. Affected Software Version: Not specified 102. Affected Software Component: Not specified 103. Affected Software Platform: Not specified 104. Affected Software Version: Not specified 105. Affected Software Component: Not specified 106. Affected Software Platform: Not specified 107. Affected Software Version: Not specified 108. Affected Software Component: Not specified 109. Affected Sof

Goal Reached Thanks to every supporter — we hit 100%!

Keycloak admin REST API Unauthorized Access Vulnerability (CVE-2024-3656)

More from this source