CVE-2020-28942

creationtimestamp| type| source ---|---|--- 2020-11-19 20:41:39+00:00| seen| https://t.me/cibsecurity/16601...

CVE-2020-28942

Summary: PrimeKey EJBCA versions prior to 7.4.3 allow enrollment with EST proxied through an RA over the Peers protocol to bypass the allowed-CA restriction for RAs. An attacker with a valid trusted client certificate and enrollment authorization can use any functioning authenticated RA connected...