Description
A vulnerability was found in Keycloak. Admin users may have to access sensitive server environment variables and system properties through user-configurable URLs. When configuring backchannel logout URLs or admin URLs, admin users can include placeholders like ${env.VARNAME} or ${PROPNAME}. The server replaces these placeholders with the actual values of environment variables or system properties during URL processing.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
keycloak
Default version status: unaffected
0 to < 26.0.8affected
Red Hat Red Hat build of Keycloak 26.0
Default version status: affected
26.0.8-1 to < *unaffected
Red Hat Red Hat build of Keycloak 26.0
Default version status: affected
26.0-7 to < *unaffected
Red Hat Red Hat build of Keycloak 26.0
Default version status: affected
26.0-8 to < *unaffected
Red Hat RHBK 26.0.8
Default version status: unaffected
Red Hat Red Hat Build of Keycloak
Default version status: affected
Red Hat Red Hat JBoss Enterprise Application Platform 8
Default version status: unaffected
Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack
Default version status: unaffected