A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pki-symkeyUpgrade jssUpgrade pki-baseUpgrade pki-caUpgrade pki-toolsUpgrade ldapjdkUpgrade jss-javadocUpgrade ldapjdk-javadocUpgrade pki-serverUpgrade tomcatjssUpgrade pki-kraUpgrade pki-base-javaUpgrade python3-pki | May 4, 2022 | Mar 15, 2021 |
| Amazon Linux Ami 2 | — | Upgrade pki-kraUpgrade pki-caUpgrade pki-symkeyUpgrade pki-serverUpgrade pki-base-javaUpgrade pki-toolsUpgrade pki-core-debuginfoUpgrade pki-javadocUpgrade pki-base | Apr 23, 2021 | Mar 15, 2021 |
| Centos_linux | — | Upgrade pki-kraUpgrade pki-javadocUpgrade jssUpgrade pki-baseUpgrade pki-symkeyUpgrade pki-tools-debuginfoUpgrade python3-pkiUpgrade ldapjdk-javadocUpgrade pki-symkey-debuginfoUpgrade ldapjdkUpgrade pki-toolsUpgrade pki-base-javaUpgrade jss-debugsourceUpgrade jss-debuginfoUpgrade pki-serverUpgrade tomcatjssUpgrade jss-javadocUpgrade pki-core-debuginfoUpgrade pki-core-debugsourceUpgrade pki-ca | Mar 18, 2021 | Mar 15, 2021 |
| Debian | — | Upgrade dogtag-pki | Jul 30, 2024 | Mar 15, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pki-toolsUpgrade pki-base-javaUpgrade pki-baseUpgrade pki-serverUpgrade pki-caUpgrade pki-symkeyUpgrade pki-kra | Apr 30, 2021 | Mar 15, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pki-symkeyUpgrade pki-base-javaUpgrade pki-toolsUpgrade pki-kraUpgrade pki-serverUpgrade pki-caUpgrade pki-base | May 19, 2021 | Mar 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pki-symkey | May 18, 2021 | Mar 15, 2021 |
| Oracle_linux | — | Upgrade pki-caUpgrade pki-baseUpgrade tomcatjssUpgrade python3-pkiUpgrade ldapjdkUpgrade pki-base-javaUpgrade jss-javadocUpgrade ldapjdk-javadocUpgrade pki-serverUpgrade pki-toolsUpgrade pki-javadocUpgrade pki-symkeyUpgrade jssUpgrade pki-kra | Mar 18, 2021 | Mar 12, 2021 |
| Redhat_linux | — | Upgrade pki-tools-debuginfoUpgrade pki-symkey-debuginfoUpgrade jssNo solution existsUpgrade pki-javadocUpgrade pki-symkeyUpgrade ldapjdkUpgrade pki-baseUpgrade jss-debuginfoUpgrade ldapjdk-javadocUpgrade pki-core-debuginfoUpgrade pki-caUpgrade jss-debugsourceUpgrade jss-javadocUpgrade pki-toolsUpgrade pki-serverUpgrade tomcatjssUpgrade pki-core-debugsourceUpgrade python3-pkiUpgrade pki-kraUpgrade pki-base-java | Mar 18, 2021 | Mar 15, 2021 |
| Rocky_linux | — | — | Aug 15, 2024 | Mar 15, 2021 |
| Ubuntu | — | Upgrade pki-tools (Ubuntu Pro)Upgrade pki-ocsp (Ubuntu Pro)Upgrade pki-tks (Ubuntu Pro)Upgrade pki-base-java (Ubuntu Pro)Upgrade libsymkey-jni (Ubuntu Pro)Upgrade python3-pki-base (Ubuntu Pro)Upgrade dogtag-pki (Ubuntu Pro)Upgrade pki-tps (Ubuntu Pro)Upgrade pki-kra (Ubuntu Pro)Upgrade pki-base (Ubuntu Pro)Upgrade pki-tps-client (Ubuntu Pro)Upgrade pki-server (Ubuntu Pro)Upgrade libsymkey-java (Ubuntu Pro)Upgrade pki-console (Ubuntu Pro)Upgrade pki-ca (Ubuntu Pro) | Nov 19, 2024 | Mar 15, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub