BIT-ejbca-2025-3027
Dashboard / Vulnerabilities / BIT-ejbca-2025-3027
Summary: Open Redirect vulnerability in EJBCA
Details: The vulnerability exists in the EJBCA service, version 8.0 Enterprise. By making a small change to the PATH of the URL associated with the service, the server fails to find the requested file and redirects to an external page. This vulnerability could allow users to be redirected to potentially malicious external sites, which can be exploited for phishing or other social engineering attacks.
References: https://nvd.nist.gov/vuln/detail/CVE-2025-3027, https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-ejbca
Affected packages
Package
Name: ejbca
Purl: pkg:bitnami/ejbca
Affected ranges
Type: SEMVER
Events:
Introduced- 8.0.0
Fixed -9.1.0
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
