Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-3501

Опубликовано: 29 апр. 2025
Источник: debian
EPSS Низкий

Описание

A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
keycloakitppackage

EPSS

Процентиль: 41%
0.0047
Низкий

Связанные уязвимости

CVSS3: 8.2
redhat
больше 1 года назад

A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended.

CVSS3: 8.2
nvd
больше 1 года назад

A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended.

CVSS3: 8.2
github
больше 1 года назад

Keycloak hostname verification

CVSS3: 8.2
altlinux
больше 1 года назад

ALT-PU-2025-6486: package `keycloak` update to version 26.2.4-alt1

CVSS3: 8.2
altlinux
около 1 года назад

ALT-PU-2025-13422: package `keycloak` update to version 26.4.0-alt1

EPSS

Процентиль: 41%
0.0047
Низкий