CVE-2025-68833
Received Received - Intake

Insufficient Access Control in HCL Hive Keycloak IAM

Publication date: 2026-08-24

Last updated on: 2026-08-24

Assigner: HCL Software

Description
HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-24
Last Modified
2026-08-24
Generated
2026-08-24
AI Q&A
2026-08-24
EPSS Evaluated
N/A
NVD
CVE-2025-68833
EUVD
EUVD-2025-210762

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
hcl hive *
hcl hive_keycloak *-*

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1240 To fulfill the need for a cryptographic primitive, the product implements a cryptographic algorithm using a non-standard, unproven, or disallowed/non-compliant cryptographic implementation.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in HCL Hive Keycloak IAM Instance is due to insufficient granularity in access control. This means the system does not properly restrict user permissions, potentially allowing unauthorized access to sensitive resources.

Impact Analysis

An attacker could exploit this to gain unauthorized access to resources, leading to data breaches, unauthorized modifications, or exposure of sensitive information. The impact depends on the privileges of the compromised account.

Compliance Impact

This vulnerability could violate compliance requirements such as GDPR or HIPAA, which mandate strict access controls and protection of personal or health data. Unauthorized access risks non-compliance and potential legal penalties.

Mitigation Strategies

Review and adjust access control policies in HCL Hive Keycloak to ensure proper granularity. Restrict unauthorized access by implementing stricter permissions and monitoring for unusual activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-68833. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart