Related Vulnerabilities: CVE-2020-1725  

A security issue was found in keycloak. In some scenarios a user still has access to a resource after changing the role mappings in Keycloak and after expiration of the previous access token.

Severity Medium

Remote Yes

Type Authentication bypass

Description

A security issue was found in keycloak. In some scenarios a user still has access to a resource after changing the role mappings in Keycloak and after expiration of the previous access token.

AVG-1332 keycloak 12.0.2-1 Medium Vulnerable

https://bugzilla.redhat.com/show_bug.cgi?id=1765129
https://issues.jboss.org/browse/KEYCLOAK-11145