Keycloak Information Disclosure Vulnerability (CVSS 3.7)

CERT-Bund published a security advisory identifying an information disclosure vulnerability in Keycloak with CVSS Base Score 3.7. The vulnerability allows remote, anonymous attackers to exploit the system and disclose information. Keycloak is an open-source identity and access management solution providing Single Sign-On capabilities for modern applications and services.

Organizations running Keycloak on Linux or UNIX systems should evaluate their exposure and implement available mitigations or patches. While the low CVSS score indicates limited severity, the remote and anonymous attack vector warrants attention from IT security teams managing identity management infrastructure.