Vulnerability Description
In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosure of CA certificates (attributes and public keys) to unauthenticated or less privileged users may occur.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Keyfactor | Ejbca | < 8.0.0 |
Related Weaknesses (CWE)
References
- https://keyfactor.comProduct
- https://support.keyfactor.com/hc/en-us/articles/16671824556827-EJBCA-Security-AdMitigationVendor Advisory
- https://keyfactor.comProduct
- https://support.keyfactor.com/hc/en-us/articles/16671824556827-EJBCA-Security-AdMitigationVendor Advisory
FAQ
What is CVE-2023-34196?
CVE-2023-34196 is a vulnerability with a CVSS score of 8.2 (HIGH). In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosu...
How severe is CVE-2023-34196?
CVE-2023-34196 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-34196?
Check the references section above for vendor advisories and patch information. Affected products include: Keyfactor Ejbca.