CVE-2025-11537
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
25/100
Published: 2026-02-10
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
Conf. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
Required
S:
Unchanged
C:
High
I:
None
A:
None
Description
A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined 'long' pattern), sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract these credentials (e.g., bearer tokens, session cookies) and use them to impersonate users, leading to a full account compromise.
Weakness Classification (1)
References & Advisories (4)
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT