Insufficient Access Control in HCL Hive Keycloak by HCL Software

CVE-2025-68833

What is CVE-2025-68833?

The HCL Hive Keycloak IAM Instance suffers from a lack of sufficient granularity in its access control mechanisms. This vulnerability could be exploited by an attacker to gain unauthorized access to sensitive resources, potentially compromising data integrity and confidentiality. It is crucial for users to evaluate their access policies and take appropriate measures to mitigate this risk.

References