All vulnerabilities

Servers and applications

CVE-2025-4575

Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate. Impact summary: If a user intends to make a trusted certificate rejected for a particular use it will be instead marked as trusted for that use. A copy & paste error during minor refactoring of the code introduced this issue in the OpenSSL 3.5 version. If, for…

Severity
Medium 6.5
Published
22 May 2025
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • Version 3.5.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-4575
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-4575