Privilege escalation via incorrect realm authorization check

Privilege escalation in Red Hat build of Keycloak allows remote authenticated users with manage-clients permission to gain realm-wide control. RealmPermissionsV2 treats the admin-permissions resource server like an ordinary client instead of requiring manage-realm authorization. Exploitation requires realm-level admin permissions to be enabled and an account holding manage-clients, after which roles, users, and other realm functions become controllable.