CVE-2025-11538
BaseFortify
Publication date: 2025-11-13
Last updated on: 2025-11-13
Assigner: Red Hat, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| keycloak | keycloak | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1327 | The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Keycloak's server occurs when debug mode is enabled with the --debug option. It insecurely binds the Java Debug Wire Protocol (JDWP) port to all network interfaces (0.0.0.0), exposing the debug port to the local network. This allows an attacker on the same network segment to connect a remote debugger and potentially execute code remotely within the Keycloak Java virtual machine.
How can this vulnerability impact me? :
An attacker on the same local network can exploit this vulnerability to attach a remote debugger to the Keycloak server, leading to remote code execution within the Java virtual machine. This can compromise the security and integrity of the Keycloak server and potentially the systems relying on it.