CVE-2020-11631

CVE-2020-11631 is a vulnerability affecting PrimeKey EJBCA versions prior to 6.15.2.6 and 7.x prior to 7.3.1.2. A malicious user can trigger an error state in the CA UI, which can then be leveraged to exploit other bugs, potentially leading to privilege escalation and remote code execution. This medium severity vulnerability (CVSS 6.5) requires at least one accessible port without client certificate authentication (e.g., 8442 or 8080) for exploitation. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this CVE.