CVE-2026-4628 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw was found in Keycloak. An improper Access Control vulnerability in Keycloak’s User-Managed Access (UMA) resource_set endpoint allows attackers with valid…
Medium CVSS: 4.3

CVE-2026-4628

A flaw was found in Keycloak. An improper Access Control vulnerability in Keycloak’s User-Managed Access (UMA) resource_set endpoint allows attackers with valid credentials to bypass the allowRemoteResourceManagement=false restriction. This occurs due to incomplete enforcement of access control checks on PUT operations to the resource_set endpoint. This issue enables unauthorized modification of protected resources, impacting data integrity.
Vendor
Redhat
Product
Build Of Keycloak
CWE
CWE-284
Yayın Tarihi
2026-03-23 09:16:26
Güncelleme
2026-04-01 14:29:05
Source Identifier
secalert@redhat.com
KEV Date Added
-

Kategoriler

CWE-284 Build Of Keycloak MEDIUM Redhat 2026

Referanslar

https://access.redhat.com/security/cve/CVE-2026-4628 https://bugzilla.redhat.com/show_bug.cgi?id=2450240