CVE-2017-12160 — It was found that Keycloak oauth would permit an authenticated resource to obtain an access/refresh token pair from the authentication server, permitting indefinite usage in the case of permission rev — CVE Database · The Intelligence Room