Certificate Verification Flaws in Keycloak by Red Hat
CVE-2025-3501

8.2HIGH

Key Information:

Vendor

Red Hat
Status
Red Hat Build Of Keycloak
Red Hat Build Of Keycloak 26.0
Red Hat Single Sign-on 7
Vendor
CVE Published:
29 April 2025
đź”” Create Red Hat Vulnerability Alert

What is CVE-2025-3501?

A vulnerability exists in Keycloak where setting the verification policy to 'ALL' inadvertently bypasses the trust store certificate verification, potentially exposing the system to security risks. This flaw could allow malicious actors to exploit the trust store, undermining the integrity of secure connections and data protection measures.

References

https://access.redhat.com/errata/RHSA-2025:4335
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:4336
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-3501
vdb-entryx_refsource_REDHAT

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.