The vulnerability in Red Hat Build of Keycloak's Admin REST API is due to a missing authorization check in the per-request in-memory cache used to resolve clients by their unique identifiers. This cache does not verify if the client belongs to the realm specified in the request path, allowing an attacker with limited administrative privileges to read or modify client configurations in the master realm by accessing them through a realm they control. This can lead to exposure of sensitive client credentials and potential open redirect attacks. The issue requires high privileges and knowledge of non-public client UUIDs. Red Hat has assessed the severity as moderate and currently has no mitigation or fix that meets their deployment and stability criteria.

Successful exploitation allows an attacker with high privileges (create-realm role) to read sensitive client credentials and modify client configurations in the master realm. This could lead to exposure of confidential data and enable redirection of administrative login attempts to malicious sites, potentially compromising administrative access. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. Exploitation requires network access, high attack complexity, and no user interaction.

Red Hat currently does not provide a mitigation or fix that meets their criteria for ease of use, deployment, applicability, or stability. Users should monitor the Red Hat advisory for updates. Since exploitation requires high privileges and specific knowledge, limiting administrative access and client UUID exposure may reduce risk. Customers with a Technical Account Manager (TAM) can consult directly with Red Hat for guidance.