This vulnerability in HCL Hive 1.0 relates to insufficient granularity of access control within the Keycloak IAM instance, potentially permitting attackers to gain unauthorized access to protected resources. The weakness is categorized under CWE-1240, which involves the use of a cryptographic primitive with a risky implementation. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required, impacting confidentiality but not integrity or availability. No vendor advisory or patch information is provided, and the product is not a cloud service.

An attacker could exploit this vulnerability to access resources without proper authorization, potentially leading to partial confidentiality loss. There is no indication of impact on integrity or availability. The medium severity reflects moderate risk due to the potential unauthorized access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is provided, users should monitor vendor communications for updates. No specific mitigation steps are currently documented.