CVE-2020-11631

An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. An error state can be generated in the CA UI by a malicious user. This, in turn, allows exploitation of other bugs. This follow-on exploitation can lead to privilege escalation and remote code execution. (This is exploitable only when at least one accessible port lacks a requirement for client certificate authentication. These ports are 8442 or 8080 in a standard installation.)

• https://support.primekey.com/news/primekey-announcementsVendor Advisory
• https://support.primekey.com/news/primekey-announcementsVendor Advisory

Published

Apr 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11626An issue was discovered in EJBCA before 6.15.2.6 and 7.x bef…6.1
• CVE-2020-11627An issue was discovered in EJBCA before 6.15.2.6 and 7.x bef…8.8
• CVE-2020-11628An issue was discovered in EJBCA before 6.15.2.6 and 7.x bef…5.3
• CVE-2020-11629An issue was discovered in EJBCA before 6.15.2.6 and 7.x bef…7.2
• CVE-2020-1163An elevation of privilege vulnerability exists in Windows De…7.8
• CVE-2020-11630An issue was discovered in EJBCA before 6.15.2.6 and 7.x bef…9.8
• CVE-2020-11632The Zscaler Client Connector prior to 2.1.2.150 did not quot…7.8
• CVE-2020-11633The Zscaler Client Connector for Windows prior to 2.1.2.74 h…9.8
• CVE-2020-11634The Zscaler Client Connector for Windows prior to 2.1.2.105 …7.8
• CVE-2020-11635The Zscaler Client Connector prior to 3.1.0 did not sufficie…7.8
• CVE-2020-11637A memory leak in the TFTP service in B&R Automation Runtime …7.5
• CVE-2020-11639An attacker could exploit the vulnerability by injecting gar…7.8