CVE-2021-40087

An issue was discovered in PrimeKey EJBCA before 7.6.0. When audit logging changes to the alias configurations of various protocols that use an enrollment secret, any modifications to the secret were logged in cleartext in the audit log (that can only be viewed by an administrator). This affects use of any of the following protocols: SCEP, CMP, or EST.

• CWE-312

• https://support.primekey.com/news/posts/53Vendor Advisory
• https://support.primekey.com/news/posts/53Vendor Advisory

Published

Aug 25, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4007Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer fro…7.8
• CVE-2021-4008A flaw was found in xorg-x11-server in versions before 21.1.…7.8
• CVE-2021-40083Knot Resolver before 5.3.2 is prone to an assertion failure,…7.5
• CVE-2021-40084opensysusers through 0.6 does not safely use eval on files i…9.8
• CVE-2021-40085An issue was discovered in OpenStack Neutron before 16.4.1, …6.5
• CVE-2021-40086An issue was discovered in PrimeKey EJBCA before 7.6.0. As p…2.2
• CVE-2021-40088An issue was discovered in PrimeKey EJBCA before 7.6.0. CMP …5.4
• CVE-2021-40089An issue was discovered in PrimeKey EJBCA before 7.6.0. The …2.3
• CVE-2021-4009A flaw was found in xorg-x11-server in versions before 21.1.…7.8
• CVE-2021-40091An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.665…9.8
• CVE-2021-40092A cross-site scripting (XSS) vulnerability in Image Tile in …5.4
• CVE-2021-40093A cross-site scripting (XSS) vulnerability in integration co…5.4