CVE-2026-0871 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the "Only administrators can view" setting for unmanaged attributes, al…
Medium CVSS: 4.9

CVE-2026-0871

A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the "Only administrators can view" setting for unmanaged attributes, allowing them to modify these attributes. This improper access control can lead to unauthorized changes to user profiles, even when the system is configured to restrict such modifications.
Vendor
Redhat
Product
Build Of Keycloak
CWE
CWE-266
Yayın Tarihi
2026-02-27 08:17:09
Güncelleme
2026-03-05 02:03:32
Source Identifier
secalert@redhat.com
KEV Date Added
-

Kategoriler

CWE-266 Build Of Keycloak MEDIUM Redhat 2026

Referanslar

https://access.redhat.com/errata/RHSA-2026:2365 https://access.redhat.com/errata/RHSA-2026:2366 https://access.redhat.com/security/cve/CVE-2026-0871 https://bugzilla.redhat.com/show_bug.cgi?id=2428881