← Database

CVE-2025-44005

CRITICAL CVSS: 10.0 Published: 2025-12-17 Modified: 2026-06-17

Description

An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks.

Affected Platforms

Unknown

Weakness Type

CWE-287

References