CVE-2025-47221: Medium severity Keyfactor Signserver vulnerability
An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2. The properties ARCHIVETODISKFILENAME-PATTERN, ARCHIVETODISKPATHBASE, ARCHIVETODISKPATHPATTERN can be set to any path, even ones that will point to files that already exist. This vulnerability gives a user with admin access the possibility to write files in arbitrary directories in the server file system and potentially overwrite files accessible by the local user JBoss.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47221?
CVE-2025-47221 is classified as a high-severity vulnerability due to its incorrect access control issues.
How do I fix CVE-2025-47221?
To fix CVE-2025-47221, upgrade Keyfactor SignServer to version 7.3.1 or later.
What is the impact of CVE-2025-47221 on Keyfactor SignServer?
CVE-2025-47221 could allow unauthorized users to access sensitive information or functionalities within Keyfactor SignServer.
Which versions of Keyfactor SignServer are affected by CVE-2025-47221?
Keyfactor SignServer versions prior to 7.3.1 are affected by CVE-2025-47221.
What type of vulnerability is CVE-2025-47221?
CVE-2025-47221 is an Incorrect Access Control vulnerability.