Search CVE reports
21 – 24 of 24 results
A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially...
1 affected package
dogtag-pki
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dogtag-pki | Not in release | Not in release | Not affected | Vulnerable | Vulnerable |
Some fixes available 1 of 3
It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication...
1 affected package
dogtag-pki
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dogtag-pki | — | Not in release | Not affected | Not affected | Not affected |
Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and deny rules to be reversed. If a server is configured to process allow...
1 affected package
dogtag-pki
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dogtag-pki | — | Not in release | Not affected | Not affected | Not affected |
Multiple temporary file creation vulnerabilities in pki-core 10.2.0.
1 affected package
dogtag-pki
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dogtag-pki | — | — | — | — | Ignored |