← Zuruck zu CVEs
CVE-2026-3911
LOW2.7
Beschreibung
A flaw was found in Keycloak. An authenticated user with the view-users role could exploit a vulnerability in the UserResource component. By accessing a specific administrative endpoint, this user could improperly retrieve user attributes that were configured to be hidden. This unauthorized information disclosure could expose sensitive user data.
CVE Details
CVSS v3.1 Bewertung2.7
SchweregradLOW
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienHIGH
BenutzerinteraktionNONE
Veroffentlicht3/11/2026
Zuletzt geandert4/2/2026
Quellenvd
Honeypot-Sichtungen0
Schwachen (CWE)
CWE-359
Referenzen
https://access.redhat.com/errata/RHSA-2026:6477(secalert@redhat.com)
https://access.redhat.com/errata/RHSA-2026:6478(secalert@redhat.com)
https://access.redhat.com/security/cve/CVE-2026-3911(secalert@redhat.com)
https://bugzilla.redhat.com/show_bug.cgi?id=2446392(secalert@redhat.com)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.