Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-3501

Опубликовано: 29 апр. 2025
Источник: nvd
CVSS3: 8.2
EPSS Низкий

Описание

A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended.

EPSS

Процентиль: 41%
0.0047
Низкий

8.2 High

CVSS3

Дефекты

CWE-297

Связанные уязвимости

CVSS3: 8.2
redhat
больше 1 года назад

A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended.

CVSS3: 8.2
debian
больше 1 года назад

A flaw was found in Keycloak. By setting a verification policy to 'ALL ...

CVSS3: 8.2
github
больше 1 года назад

Keycloak hostname verification

CVSS3: 8.2
altlinux
больше 1 года назад

ALT-PU-2025-6486: package `keycloak` update to version 26.2.4-alt1

CVSS3: 8.2
altlinux
около 1 года назад

ALT-PU-2025-13422: package `keycloak` update to version 26.4.0-alt1

EPSS

Процентиль: 41%
0.0047
Низкий

8.2 High

CVSS3

Дефекты

CWE-297