Threats tagged 'ghsa-9rjg-qmjp-26f2'

A vulnerability in Keyfactor EJBCA 9 allows a removed administrator to retain access longer than intended due to cached authentication sessions. Specifically, when an administrator is removed from their role while having an active TLS session, the system may cache their authentication beyond the configured maximum time (default 30 seconds), potentially allowing unauthorized continued access.