CVE-2024-36066

Description

The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CMP includes password-based MAC as one of the options for message integrity and authentication (the other option is certificate-based). RFC 4211 section 4.4 requires that password-based MAC parameters use a salt with a random value of at least 8 octets. This helps to inhibit dictionary attacks. Because the standalone CMP client originally was developed as test code, the salt was instead hardcoded and only 6 octets long.

CVSS v3.1 Score

3.1

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected Products

Vendor	Product	Versions
keyfactor	ejbca	< 8.3.1

References

Advisories & Patches

https://support.keyfactor.com/hc/en-us/articles/26965687021595-EJBCA-Security-Advisory-EJBCA-standalone-CMP-CLI-client

Other References

https://datatracker.ietf.org/doc/html/rfc4211#section-4.4

Frequently Asked Questions

What is CVE-2024-36066? +

The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CMP includes password-based MAC as one of the options for message integrity and authentication (the other option is certificate-based). RFC 4211 section 4.4 requires that password-based MAC parameters use a salt with a random value of at least 8 octets. This helps to inhibit dictionary attacks. Because the standalone CMP client originally was developed as test code, the salt was instead hardcoded and only 6 octets long. It has a CVSS v3.1 base score of 3.1 (LOW).

How severe is CVE-2024-36066? +

CVE-2024-36066 has a CVSS v3.1 score of 3.1 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.

What products are affected by CVE-2024-36066? +

CVE-2024-36066 affects products from keyfactor, specifically: ejbca. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-36066? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-34458 7.5

Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in information disclosure.

CVE-2024-42006 7.5

Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure.

CVE-2025-47222 6.5

A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2. Setting any chosen class name to any …

CVE-2025-47220 5.3

A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLE_SIGNATURE_CUSTOM_IMAGE_PATH, which exists in the …

CVE-2025-47221 5.3

An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2. The properties ARCHIVETODISK_FILENAME-PATTERN, ARCHIVETODISK_PATH_BASE, ARCHIVETODISK_PATH_PATTERN can be …

CVE-2025-26787 4.7

An error in the SignServer container startup logic was found in Keyfactor SignServer versions prior to 7.2. The Admin CLI …