Certificate Verification Flaws in Keycloak by Red Hat
CVE-2025-3501

8.2HIGH

Key Information:

Status
Red Hat Build Of Keycloak
Red Hat Build Of Keycloak 26
Red Hat Build Of Keycloak 26.0
Vendor
CVE Published:
29 April 2025

What is CVE-2025-3501?

A vulnerability exists in Keycloak where setting the verification policy to 'ALL' inadvertently bypasses the trust store certificate verification, potentially exposing the system to security risks. This flaw could allow malicious actors to exploit the trust store, undermining the integrity of secure connections and data protection measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://access.redhat.com/errata/RHSA-2025:4335
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:4336
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:8672
vendor-advisoryx_refsource_REDHAT

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.