Vulnerability in Primekey Ejbca
CVE-2021-40089
An issue was discovered in PrimeKey EJBCA before 7.6.0. The General Purpose Custom Publisher, which is normally run to invoke a local script upon a publishing operation, was still able to run if the System Configuration setting Enable External Script Access was disabled. With this setting disabled it's not possible to create new such publishers, but existing publishers would continue to run.
EPSS: 0.002 (13.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Primekey Ejbca
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-40089?
- CVE-2021-40089 is a low-severity vulnerability in Primekey Ejbca. CVSS score: 2.3/10. Published 2021-08-25.
- How severe is CVE-2021-40089?
- Low severity. CVSS v3 base score is 2.3 out of 10.