CVE-2019-14832: Red Hat Keycloak

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured. An authenticated attacker with knowledge of a user id could use this flaw to access unauthorized information or to carry out further attacks.

Affected products

• Red Hat Keycloak: before 7.0.1 (fixed in 7.0.1)

Published 2019-10-15. Last modified 2026-06-17.