Product
The Keycloak Admin CLI (kcadm) tool fails to properly validate server certificates when a custom truststore is configured, enabling attackers to intercept and compromise administrative credentials via man-in-the-middle attacks.