A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-jssalma-upgrade-jss-javadocalma-upgrade-ldapjdkalma-upgrade-ldapjdk-javadocalma-upgrade-pki-basealma-upgrade-pki-base-javaalma-upgrade-pki-caalma-upgrade-pki-kraalma-upgrade-pki-serveralma-upgrade-pki-symkeyalma-upgrade-pki-toolsalma-upgrade-python3-pkialma-upgrade-tomcatjss | May 4, 2022 | Mar 15, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-pki-baseamazon-linux-ami-2-upgrade-pki-base-javaamazon-linux-ami-2-upgrade-pki-caamazon-linux-ami-2-upgrade-pki-core-debuginfoamazon-linux-ami-2-upgrade-pki-javadocamazon-linux-ami-2-upgrade-pki-kraamazon-linux-ami-2-upgrade-pki-serveramazon-linux-ami-2-upgrade-pki-symkeyamazon-linux-ami-2-upgrade-pki-tools | Apr 23, 2021 | Mar 15, 2021 | |
| Centos_linux | — | centos-upgrade-jsscentos-upgrade-jss-debuginfocentos-upgrade-jss-debugsourcecentos-upgrade-jss-javadoccentos-upgrade-ldapjdkcentos-upgrade-ldapjdk-javadoccentos-upgrade-pki-basecentos-upgrade-pki-base-javacentos-upgrade-pki-cacentos-upgrade-pki-core-debuginfocentos-upgrade-pki-core-debugsourcecentos-upgrade-pki-javadoccentos-upgrade-pki-kracentos-upgrade-pki-servercentos-upgrade-pki-symkeycentos-upgrade-pki-symkey-debuginfocentos-upgrade-pki-toolscentos-upgrade-pki-tools-debuginfocentos-upgrade-python3-pkicentos-upgrade-tomcatjss | Mar 18, 2021 | Mar 15, 2021 |
| Debian | debian-upgrade-dogtag-pki | Jul 30, 2024 | Mar 15, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-pki-basehuawei-euleros-2_0_sp3-upgrade-pki-base-javahuawei-euleros-2_0_sp3-upgrade-pki-cahuawei-euleros-2_0_sp3-upgrade-pki-krahuawei-euleros-2_0_sp3-upgrade-pki-serverhuawei-euleros-2_0_sp3-upgrade-pki-symkeyhuawei-euleros-2_0_sp3-upgrade-pki-tools | Apr 30, 2021 | Mar 15, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-pki-basehuawei-euleros-2_0_sp5-upgrade-pki-base-javahuawei-euleros-2_0_sp5-upgrade-pki-cahuawei-euleros-2_0_sp5-upgrade-pki-krahuawei-euleros-2_0_sp5-upgrade-pki-serverhuawei-euleros-2_0_sp5-upgrade-pki-symkeyhuawei-euleros-2_0_sp5-upgrade-pki-tools | May 19, 2021 | Mar 15, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-pki-symkey | May 18, 2021 | Mar 15, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-jssoracle-linux-upgrade-jss-javadocoracle-linux-upgrade-ldapjdkoracle-linux-upgrade-ldapjdk-javadocoracle-linux-upgrade-pki-baseoracle-linux-upgrade-pki-base-javaoracle-linux-upgrade-pki-caoracle-linux-upgrade-pki-javadocoracle-linux-upgrade-pki-kraoracle-linux-upgrade-pki-serveroracle-linux-upgrade-pki-symkeyoracle-linux-upgrade-pki-toolsoracle-linux-upgrade-python3-pkioracle-linux-upgrade-tomcatjss | Mar 18, 2021 | Mar 12, 2021 |
| Redhat_linux | redhat-upgrade-jssredhat-upgrade-jss-debuginforedhat-upgrade-jss-debugsourceredhat-upgrade-jss-javadocredhat-upgrade-ldapjdkredhat-upgrade-ldapjdk-javadocredhat-upgrade-pki-baseredhat-upgrade-pki-base-javaredhat-upgrade-pki-caredhat-upgrade-pki-core-debuginforedhat-upgrade-pki-core-debugsourceredhat-upgrade-pki-javadocredhat-upgrade-pki-kraredhat-upgrade-pki-serverredhat-upgrade-pki-symkeyredhat-upgrade-pki-symkey-debuginforedhat-upgrade-pki-toolsredhat-upgrade-pki-tools-debuginforedhat-upgrade-python3-pkiredhat-upgrade-tomcatjss | Mar 18, 2021 | Mar 15, 2021 | |
| Ubuntu | ubuntu-pro-upgrade-dogtag-pkiubuntu-pro-upgrade-libsymkey-javaubuntu-pro-upgrade-libsymkey-jniubuntu-pro-upgrade-pki-baseubuntu-pro-upgrade-pki-base-javaubuntu-pro-upgrade-pki-caubuntu-pro-upgrade-pki-consoleubuntu-pro-upgrade-pki-kraubuntu-pro-upgrade-pki-ocspubuntu-pro-upgrade-pki-serverubuntu-pro-upgrade-pki-tksubuntu-pro-upgrade-pki-toolsubuntu-pro-upgrade-pki-tpsubuntu-pro-upgrade-pki-tps-clientubuntu-pro-upgrade-python3-pki-base | Nov 19, 2024 | Mar 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub