How severe is CVE-2024-36066?

CVE-2024-36066 has a CVSS 3.x base score of 3.1, rated low severity. It is exploitable over network with high attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.

Is CVE-2024-36066 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (6th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-36066?

CVE-2024-36066 affects Keyfactor Ejbca. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2024-36066?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2024-36066 have an EU (EUVD) identifier?

Yes. CVE-2024-36066 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-35867.

When was CVE-2024-36066 published?

CVE-2024-36066 was published on 2024-09-12 and last updated on 2026-06-17.

CVE-2024-36066

CVE-2024-36066 is a low-severity vulnerability in Keyfactor Ejbca with a CVSS 3.x base score of 3.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Low (CVSS 3.x base score 3.1)
EPSS exploit prediction: 0% (6th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-35867
Affected product: Keyfactor Ejbca
Published: 2024-09-12
Last modified: 2026-06-17

Description

The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CMP includes password-based MAC as one of the options for message integrity and authentication (the other option is certificate-based). RFC 4211 section 4.4 requires that password-based MAC parameters use a salt with a random value of at least 8 octets. This helps to inhibit dictionary attacks. Because the standalone CMP client originally was developed as test code, the salt was instead hardcoded and only 6 octets long.

Frequently asked questions

What is CVE-2024-36066?: The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CMP includes password-based MAC as one of the options for message integrity and authentication (the other option is certificate-based). RFC 4211 section 4.4 requires that password-based MAC parameters use a salt with a random value of at least 8 octets. This helps to inhibit dictionary attacks. Because the standalone CMP client originally was developed as test code, the salt was instead hardcoded and only 6 octets long.
How severe is CVE-2024-36066?: CVE-2024-36066 has a CVSS 3.x base score of 3.1, rated low severity. It is exploitable over network with high attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2024-36066 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (6th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-36066?: CVE-2024-36066 affects Keyfactor Ejbca. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-36066?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2024-36066 have an EU (EUVD) identifier?: Yes. CVE-2024-36066 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-35867.
When was CVE-2024-36066 published?: CVE-2024-36066 was published on 2024-09-12 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:keyfactor:ejbca:*:*:*:*:*:*:*:*

More vulnerabilities in Keyfactor Ejbca

CVE-2023-34196 — High (CVSS 8.2): In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial…

All CVEs affecting Keyfactor Ejbca →