CVE-2025-3027: Open Redirect vulnerability in EJBCA

Q: What is the severity of CVE-2025-3027?

The severity of CVE-2025-3027 has not been specifically rated, but it poses a significant risk due to potential user redirection.

Q: How do I fix CVE-2025-3027?

To fix CVE-2025-3027, ensure that the EJBCA service is updated to a version that addresses this vulnerability.

Q: What impact does CVE-2025-3027 have on users?

CVE-2025-3027 can lead to users being redirected to external pages, potentially leading to phishing attacks.

Q: Which software is affected by CVE-2025-3027?

CVE-2025-3027 affects the EJBCA service, version 8.0 Enterprise by PrimeKey.

Q: Is there a patch available for CVE-2025-3027?

As of now, users should check with PrimeKey for any available patches or updates to mitigate CVE-2025-3027.

Published Mar 31, 2025

Updated

The vulnerability exists in the EJBCA service, version 8.0 Enterprise. By making a small change to the PATH of the URL associated with the service, the server fails to find the requested file and redirects to an external page. This vulnerability could allow users to be redirected to potentially malicious external sites, which can be exploited for phishing or other social engineering attacks.

Affected Software

2 affected components

PrimeKey EJBCA

PrimeKey EJBCA>=8.0<9.1

Remediation

Information

The vulnerability has been fixed by the EJBCA team in version 9.1. In turn, the vendor recommends that if you are running a reverse proxy, you disable caching for the URL paths /ejbca/ra/ and /ejbca/adminweb/.

Event History

Mar 31, 2025

CVE Published

via MITRE·10:31 AM

Data Sourced

via MITRE·10:31 AM

RemedyDescriptionWeakness

Data Sourced

via NVD·11:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-3027?

The severity of CVE-2025-3027 has not been specifically rated, but it poses a significant risk due to potential user redirection.

How do I fix CVE-2025-3027?