CVE-2025-0604

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-0604
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-0604.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-0604
Aliases
Related
Published
2025-01-22T14:34:45.923Z
Modified
2026-07-16T03:47:20.152710011Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
Summary
Keycloak-ldap-federation: authentication bypass due to missing ldap bind after password reset in keycloak
Details

A flaw was found in Keycloak. When an Active Directory user resets their password, the system updates it without performing an LDAP bind to validate the new credentials against AD. This vulnerability allows users whose AD accounts are expired or disabled to regain access in Keycloak, bypassing AD restrictions. The issue enables authentication bypass and could allow unauthorized access under certain conditions.

Database specific 
{
    "cwe_ids": [
        "CWE-287"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0604.json",
    "cna_assigner": "redhat"
}
References

Affected packages

Git / github.com/keycloak/keycloak

Affected ranges

Type
GIT
Repo
https://github.com/keycloak/keycloak
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b8563422152a91683d46ece89f257b343767cc14
Fixed
c11d93d93634b19102387bb89858c3043ccb40b9
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "26.0.10"
        },
        {
            "fixed": "26.1.3"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

1.*
1.0-alpha-1
1.0-alpha-1-12062013
1.0-alpha-2
1.0-alpha-3
1.0-beta-1
1.0-beta-2
1.0-beta-4
1.0-final
1.0-rc-1
1.0.0.Final
1.1.0.Beta2
1.3.0.Final
2.*
2.4.0.Test

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-0604.json"