| Package | Affected versions | Patched versions |
|---|---|---|
| ejbca | ≥ 7.0.0, < 7.3.1.2< 6.15.2.6 | 7.3.1.26.15.2.6 |
An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. In several sections of code, the verification of serialized objects sent between nodes (connected via the Peers protocol) allows insecure objects to be deserialized.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free