CVE-2025-3501

A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended.
CVSS

No CVSS.

Configurations

No configuration.

History

07 Aug 2025, 13:15

Type Values Removed Values Added
References
  • () https://github.com/keycloak/keycloak/issues/39350 -
  • () https://github.com/keycloak/keycloak/pull/39366 -

09 Jun 2025, 14:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:8690 -

09 Jun 2025, 13:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:8672 -

30 Apr 2025, 03:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:4336 -

29 Apr 2025, 23:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:4335 -
CVSS v2 : unknown
v3 : 8.2
v2 : unknown
v3 : unknown
CWE CWE-297

29 Apr 2025, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-29 21:15

Updated : 2025-08-07 13:15


NVD link : CVE-2025-3501

Mitre link : CVE-2025-3501


JSON object : View

Products Affected

No product.

CWE

No CWE.