description: It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing access and modification of data the user was not intended to have.
problem types: CWE-916
affected:
{
vendor: n/a
product: keycloak
versions:
version: before version 12.0.0, status: affected
}