Yüksek CVSS 7.4
CVE-2026-4282: Build Of Keycloak: güvenlik açığı
Açıklama (NVD)
A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacker to forge authorization codes. Successful exploitation can lead to the creation of admin-capable access tokens, resulting in privilege escalation.
Özet bilgiler
- Ürün
- Redhat Build Of Keycloak
- CVSS v3.1
- 7.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - EPSS
- %0,43 (yüzdelik 38)
- CWE
- CWE-653
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-build-of-keycloak | — | — | — |
| redhat-build-of-keycloak | 26.2 | 26.2 | — |
| redhat-build-of-keycloak | 26.2.15 | 26.2.15 | — |
| redhat-build-of-keycloak | 26.4 | 26.4 | — |
| redhat-build-of-keycloak | 26.4.11 | 26.4.11 | — |