CVE-2025-62819

Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA Registration Authority User Interface. This allows a remote user, authenticated with a valid client certificate, to renew their certificate even if the end entity status...

CVE-2025-62819

Keyfactor EJBCA through version 9.3.3 contains an authorization flaw in the RA (Registration Authority) User Interface . The system performs insufficient checks when a remote user self-renews a client certificate, allowing them to bypass end entity status or profile settings that should otherwise...

CVE-2025-62819: n/a: Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via…

Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA Registration Authority User Interface. This allows a remote user, authenticated with a valid client certificate, to renew their certificate even if the end entity status...

EUVD-2025-211240

Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA Registration Authority User Interface. This allows a remote user, authenticated with a valid client certificate, to renew their certificate even if the end entity status...

PT-2026-135437

Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA Registration Authority User Interface. This allows a remote user, authenticated with a valid client certificate, to renew their certificate even if the end entity status...

CVE-2025-62819

Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA Registration Authority User Interface. This allows a remote user, authenticated with a valid client certificate, to renew their certificate even if the end entity status...