Advisory severityHigh8.1Red Hat Linux

High [CVE-2024-3656] Keycloak: unguarded admin rest api endpoints allows low privilege users to use administrative functionalities

This high-severity Red Hat Linux advisory covers CVE-2024-3656 affecting Red Hat Build of Keycloak, Red Hat Single Sign-On 7.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2024-3656 Source published Oct 9, 2024Source updated Oct 9, 2024

VulniPulse record published Oct 9, 2026

CVE-2024-3656

Affected products & platforms

Red Hat LinuxUnclassified

Open source advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities.

This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. Red Hat has evaluated this vulnerability.

This affects only Keycloak server and no Keycloak clients library ship the affected code. Red Hat severity: Important — CVSS 8.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).

Weakness: CWE-200. Affected Red Hat products: Red Hat Build of Keycloak; Red Hat Single Sign-On 7.

Red Hat lists Red Hat JBoss Enterprise Application Platform 8 as not affected. Red Hat fixing advisory: RHSA-2024:3575, RHSA-2024:3572.

Affected versions

No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.

Official advisory · high-confidence parse· fetched 3 days ago·verify at source

Fixed versions

RHSA-2024:3575
RHSA-2024:3572

Official advisory · high-confidence parse· fetched 3 days ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Official advisory · high-confidence parse· fetched 3 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.