CVE-2020-25276 Security feature bypass in n/a
Attackers can bypass certificate revocation checks during EST enrollment if client certificates are used, allowing revoked certificates to enroll new entities.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-25276?
CVE-2020-25276 is a high-severity vulnerability in n/a, published on 11 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1. When using a client certificate to enroll over the EST protocol, no revocation check is performed on that certificate. This vulnerability can only affect a system that has EST configured, uses client certificates to authenticate enrollment, and has had such a certificate revoked. This certificate needs to belong to a role that is authorized to enroll new end entities. (To completely mitigate this problem prior to upgrade, remove any revoked client certificates from their respective roles.)
Weakness: CWE-295
Which versions are affected by CVE-2020-25276?
1 open source package ship an affected version, including ejbca. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
ejbca Bitnami | From 7.0.0 | 7.4.1 |
Products include Primekey Ejbca.
How do I fix CVE-2020-25276?
Upgrade ejbca to 7.4.1 or later.
Is CVE-2020-25276 being exploited?
There is no known exploitation of CVE-2020-25276 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as BIT-ejbca-2020-25276, GHSA-h4c3-p5w7-477x.