CyberSecBulletin

Keyfactor vulnerabilities

We track 2 vulnerabilities in Keyfactor products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2024.

2vulnerabilities
1critical
1high
0exploited
9.0average CVSS score

Latest Keyfactor vulnerabilities

  • 9.8 Critical severity

    command: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2024-33872Keyfactor

    Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code execution and escalation of privileges.

  • 8.2 High severity

    Ejbca: Improper Authentication

    CVE-2023-34196Keyfactor

    In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosure of CA certificates (attributes and public keys) to unauth