A vulnerability in the Admin REST API of Keycloak allows an administrator with limited privileges to access or modify sensitive client configurations in the master realm by exploiting improper authorization checks in the per-request in-memory cache. This flaw can lead to exposure of client credentials or redirection of administrative login attempts to malicious sites. The issue affects Keycloak and has a CVSS score of 5.5, indicating medium severity.