CVE-2021-40088: Medium severity PrimeKey EJBCA vulnerability
An issue was discovered in PrimeKey EJBCA before 7.6.0. CMP RA Mode can be configured to use a known client certificate to authenticate enrolling clients. The same RA client certificate is used for revocation requests as well. While enrollment enforces multi tenancy constraints (by verifying that the client certificate has access to the CA and Profiles being enrolled against), this check was not performed when authenticating revocation operations, allowing a known tenant to revoke a certificate belonging to another tenant.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-40088?
CVE-2021-40088 is classified as a medium severity vulnerability.
How do I fix CVE-2021-40088?
To remediate CVE-2021-40088, upgrade your PrimeKey EJBCA software to version 7.6.0 or later.
What is the impact of CVE-2021-40088?
The impact of CVE-2021-40088 allows attackers to exploit improperly configured client certificates in the CMP RA Mode for unauthorized access.
Is CVE-2021-40088 still a risk if I use a different RA client certificate?
Yes, if not properly configured, using a different RA client certificate may still expose you to risks related to CVE-2021-40088.
What are the affected versions for CVE-2021-40088?
CVE-2021-40088 affects all versions of PrimeKey EJBCA prior to 7.6.0.