low3.8
CVE-2026-33585
Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenan…
Impact
Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session. This issue affects Symmetric Key Agreement Platform: before 26.03.
Affected products
| Product | Affected versions |
|---|---|
| Symmetric Key Agreement Platform | before 26.03. |
Versions were read from the advisory text. No structured product data has been published for this record yet.