EJBCA up to 6.15.2.5/7.3.1.1 External Command Certificate Validator unrestricted upload

Summaryinfo

A vulnerability classified as critical was found in EJBCA up to 6.15.2.5/7.3.1.1. Affected is an unknown function of the component External Command Certificate Validator. Executing a manipulation can lead to unrestricted upload. This vulnerability is handled as CVE-2020-11629. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability classified as critical was found in EJBCA up to 6.15.2.5/7.3.1.1. This vulnerability affects an unknown function of the component External Command Certificate Validator. The manipulation with an unknown input leads to a unrestricted upload vulnerability. The CWE definition for the vulnerability is CWE-434. The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. The External Command Certificate Validator, which allows administrators to upload external linters to validate certificates, is supposed to save uploaded test certificates to the server. An attacker who has gained access to the CA UI could exploit this to upload malicious scripts to the server. (Risks associated with this issue alone are negligible unless a malicious user already has gained access to the CA UI through other means, as a trusted user is already trusted to upload scripts by virtue of having access to the validator.)

The weakness was released 04/08/2020. This vulnerability was named CVE-2020-11629 since 04/07/2020. The exploitation appears to be easy. The attack can be initiated remotely. The successful exploitation requires a single authentication. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1608.002 by the MITRE ATT&CK project.

Upgrading to version 6.15.2.6 or 7.3.1.2 eliminates this vulnerability.

Entries connected to this vulnerability are available at VDB-152868, VDB-152867, VDB-152865 and VDB-152864. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• EJBCA

Version

• 6.15.2.0
• 6.15.2.1
• 6.15.2.2
• 6.15.2.3
• 6.15.2.4
• 6.15.2.5
• 7.3.1.0
• 7.3.1.1

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion