CyberRota Analysis
AI-GeneratedA vulnerability in Keycloak allows users with the impersonation role to impersonate a realm administrator, granting them full administrative control over the realm. This includes the ability to manage users, clients, and roles, posing a significant risk to the integrity of the identity and access management system. Organizations utilizing Keycloak should prioritize addressing this issue to prevent unauthorized access and potential data breaches.
Original NVD Description
Keycloak is an open-source identity and access management solution. A vulnerability was discovered where a user with the impersonation role can impersonate a realm administrator. This allows the attacker to gain full administrative control over the realm, including the ability to manage users, clients, and roles.