Description
A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin Permissions(FGAPv2) are enabled. An administrative user with the manage-users role can escalate their privileges to realm-admin due to improper privilege enforcement. This vulnerability allows unauthorized elevation of access rights, compromising the intended separation of administrative duties and posing a security risk to the realm.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
keycloak
Default version status: unaffected
0 to < 26.2.6affected
Red Hat Red Hat build of Keycloak 26
Default version status: unaffected
Red Hat Red Hat build of Keycloak 26.2
Default version status: affected
26.2.6-1 to < *unaffected
Red Hat Red Hat build of Keycloak 26.2
Default version status: affected
26.2-6 to < *unaffected
Red Hat Red Hat build of Keycloak 26.2
Default version status: affected
26.2-6 to < *unaffected
Red Hat Red Hat JBoss Enterprise Application Platform 8
Default version status: unaffected
Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack
Default version status: unaffected
Red Hat Red Hat Single Sign-On 7
Default version status: unaffected