A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pki-caUpgrade jssUpgrade pki-baseUpgrade pki-symkeyUpgrade ldapjdkUpgrade pki-serverUpgrade python3-pkiUpgrade tomcatjssUpgrade pki-base-javaUpgrade pki-kraUpgrade pki-toolsUpgrade jss-javadocUpgrade ldapjdk-javadoc | May 4, 2022 | Mar 15, 2021 |
| Amazon Linux Ami 2 | — | Upgrade pki-kraUpgrade pki-caUpgrade pki-core-debuginfoUpgrade pki-symkeyUpgrade pki-serverUpgrade pki-base-javaUpgrade pki-javadocUpgrade pki-toolsUpgrade pki-base | Apr 23, 2021 | Mar 15, 2021 |
| Centos_linux | — | Upgrade jssUpgrade ldapjdk-javadocUpgrade python3-pkiUpgrade pki-kraUpgrade pki-symkey-debuginfoUpgrade pki-baseUpgrade pki-symkeyUpgrade pki-tools-debuginfoUpgrade pki-javadocUpgrade ldapjdkUpgrade pki-base-javaUpgrade pki-core-debugsourceUpgrade jss-debuginfoUpgrade pki-caUpgrade pki-core-debuginfoUpgrade pki-serverUpgrade pki-toolsUpgrade tomcatjssUpgrade jss-javadocUpgrade jss-debugsource | Mar 18, 2021 | Mar 15, 2021 |
| Debian | — | Upgrade dogtag-pki | Jul 30, 2024 | Mar 15, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pki-toolsUpgrade pki-base-javaUpgrade pki-serverUpgrade pki-caUpgrade pki-baseUpgrade pki-kraUpgrade pki-symkey | Apr 30, 2021 | Mar 15, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pki-serverUpgrade pki-kraUpgrade pki-baseUpgrade pki-caUpgrade pki-symkeyUpgrade pki-base-javaUpgrade pki-tools | May 19, 2021 | Mar 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pki-symkey | May 18, 2021 | Mar 15, 2021 |
| Oracle_linux | — | Upgrade pki-javadocUpgrade ldapjdk-javadocUpgrade pki-toolsUpgrade jssUpgrade pki-kraUpgrade pki-serverUpgrade pki-symkeyUpgrade tomcatjssUpgrade jss-javadocUpgrade ldapjdkUpgrade python3-pkiUpgrade pki-base-javaUpgrade pki-caUpgrade pki-base | Mar 18, 2021 | Mar 12, 2021 |
| Redhat_linux | — | Upgrade pki-symkeyUpgrade pki-symkey-debuginfoUpgrade pki-javadocUpgrade jss-debuginfoNo solution existsUpgrade pki-baseUpgrade ldapjdk-javadocUpgrade ldapjdkUpgrade pki-tools-debuginfoUpgrade jssUpgrade pki-serverUpgrade python3-pkiUpgrade tomcatjssUpgrade pki-toolsUpgrade pki-caUpgrade pki-base-javaUpgrade jss-javadocUpgrade pki-core-debugsourceUpgrade pki-kraUpgrade jss-debugsourceUpgrade pki-core-debuginfo | Mar 18, 2021 | Mar 15, 2021 |
| Rocky_linux | — | — | Aug 15, 2024 | Mar 15, 2021 |
| Ubuntu | — | Upgrade pki-kra (Ubuntu Pro)Upgrade pki-ca (Ubuntu Pro)Upgrade pki-tps-client (Ubuntu Pro)Upgrade pki-console (Ubuntu Pro)Upgrade pki-tps (Ubuntu Pro)Upgrade libsymkey-java (Ubuntu Pro)Upgrade dogtag-pki (Ubuntu Pro)Upgrade pki-server (Ubuntu Pro)Upgrade pki-base (Ubuntu Pro)Upgrade pki-tools (Ubuntu Pro)Upgrade pki-tks (Ubuntu Pro)Upgrade libsymkey-jni (Ubuntu Pro)Upgrade pki-base-java (Ubuntu Pro)Upgrade pki-ocsp (Ubuntu Pro)Upgrade python3-pki-base (Ubuntu Pro) | Nov 19, 2024 | Mar 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub