CVE-2025-49602: CVE-2025-49602: güvenlik açığı

Açıklama (NVD)

An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having a valid TLS session, EJBCA may, in certain circumstances, cache authentication for longer than the configured maximum time (default: 30 seconds), which results in the former administrator retaining access that they should no longer have.

Özet bilgiler

CVSS v3.1

9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,43 (yüzdelik 37)

CWE

CWE-613

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• keyfactor.com
• support.keyfactor.com
• CWE-613