In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosure of CA certificates (attributes and public keys) to unauthenticated or less privileged users may occur.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:LKeyfactor Ejbca
APPKeyfactor< 8.0.0
Powiązane podatności
The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with t...
Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure.
Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in inf...
An error in the SignServer container startup logic was found in Keyfactor SignServer versions prior to 7.2. Th...
A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2. Setting any chosen class n...