CVE-2021-40087

2.7 lowEPSS 0.4%

Low (2.7) in primekey ejbca. EPSS 0.4% chance of exploitation in the next 30 days.

An issue was discovered in PrimeKey EJBCA before 7.6.0. When audit logging changes to the alias configurations of various protocols that use an enrollment secret, any modifications to the secret were logged in cleartext in the audit log (that can only be viewed by an administrator). This affects use of any of the following protocols: SCEP, CMP, or EST.

Severity

CVSS 3.1

2.7 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-312
Published: 2021-08-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

primekey:ejbca

References

https://support.primekey.com/news/posts/53
https://support.primekey.com/news/posts/53

Check your stack JSON