CVE-2025-23367 | Red Hat Build of Keycloak Wildfly Server Role Based Access Control Provider access control

A vulnerability classified as critical was found in Red Hat Build of Keycloak, Data Grid, Fuse, JBoss Data Grid, JBoss Enterprise Application Platform, JBoss Enterprise Application Platform Expansion Pack, Process Automation and Single Sign-On. Affected by this vulnerability is an unknown functionality of the component Wildfly Server Role Based Access Control Provider. The manipulation leads to improper access controls.

This vulnerability is known as CVE-2025-23367. The attack can be launched remotely. There is no exploit available.