CVE-2017-12159

CVE-2017-12159 describes a vulnerability in Keycloak, Red Hat Enterprise Linux Server, and Red Hat Single Sign-On where the CSRF prevention cookie was not unique per session. This flaw allows an attacker to hijack an authenticated user session, potentially leading to information disclosure. Rated 7.5 HIGH, the vulnerability has a low attack complexity and no required user interaction, but only impacts confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.