Keycloak Admin REST API Improper Access Control Vulnerability Allowing Information Disclosure

An improper access control vulnerability has been identified in the Keycloak Admin REST API. This issue allows low-privileged users with 'create-client' permission to access internal user profile schema data through the /admin/realms/master/users/profile endpoint. The exposed data includes attribute names, validation rules, display metadata, and permission mappings. While this vulnerability does not directly compromise user accounts or system integrity, it could be exploited for targeted attacks or privilege escalation by leveraging the disclosed schema information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive user profile schema data, which could be used to conduct targeted attacks or escalate privileges within the application.