Detections
Analytics
CVE-2020-11630
critical
Description
An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. In several sections of code, the verification of serialized objects sent between nodes (connected via the Peers protocol) allows insecure objects to be deserialized.
References
https://support.primekey.com/news/posts/ejbca-security-advisory-deserialization-bug