CVE-2026-4633

Katalog CVE

CVSS 3.7 · Low EPSS 0,37%

Kerentanan Generation of Error Message Containing Sensitive Information pada redhat build of keycloak. Skor CVSS 3.1 3.7 (Low) menurut NVD.

Deskripsi (NVD)

A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login flow when Organizations are enabled. This vulnerability allows an attacker to determine the existence of users, leading to information disclosure through user enumeration.

Rincian

Terbit di NVD

23 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.7 (Low), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-209: Generation of Error Message Containing Sensitive Information

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 28,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-4633 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2450247 exploit · issue tracking · advisory vendor