A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ldapjdk-javadocUpgrade ldapjdkUpgrade tomcatjssUpgrade pki-toolsUpgrade python3-pkiUpgrade pki-base-javaUpgrade pki-kraUpgrade jss-javadocUpgrade pki-serverUpgrade pki-caUpgrade pki-symkeyUpgrade pki-baseUpgrade jss | May 4, 2022 | Mar 15, 2021 |
| Amazon Linux Ami 2 | — | Upgrade pki-javadocUpgrade pki-toolsUpgrade pki-serverUpgrade pki-base-javaUpgrade pki-symkeyUpgrade pki-core-debuginfoUpgrade pki-baseUpgrade pki-caUpgrade pki-kra | Apr 23, 2021 | Mar 15, 2021 |
| Centos_linux | — | Upgrade pki-tools-debuginfoUpgrade ldapjdk-javadocUpgrade python3-pkiUpgrade pki-symkey-debuginfoUpgrade pki-baseUpgrade pki-symkeyUpgrade ldapjdkUpgrade jssUpgrade pki-kraUpgrade pki-javadocUpgrade jss-debugsourceUpgrade jss-javadocUpgrade tomcatjssUpgrade pki-core-debugsourceUpgrade pki-base-javaUpgrade pki-serverUpgrade pki-toolsUpgrade jss-debuginfoUpgrade pki-caUpgrade pki-core-debuginfo | Mar 18, 2021 | Mar 15, 2021 |
| Debian | — | Upgrade dogtag-pki | Jul 30, 2024 | Mar 15, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pki-caUpgrade pki-baseUpgrade pki-serverUpgrade pki-toolsUpgrade pki-base-javaUpgrade pki-kraUpgrade pki-symkey | Apr 30, 2021 | Mar 15, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pki-symkeyUpgrade pki-base-javaUpgrade pki-toolsUpgrade pki-caUpgrade pki-baseUpgrade pki-kraUpgrade pki-server | May 19, 2021 | Mar 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pki-symkey | May 18, 2021 | Mar 15, 2021 |
| Oracle_linux | — | Upgrade pki-toolsUpgrade pki-kraUpgrade ldapjdk-javadocUpgrade pki-symkeyUpgrade jssUpgrade pki-javadocUpgrade pki-serverUpgrade ldapjdkUpgrade pki-caUpgrade jss-javadocUpgrade pki-base-javaUpgrade python3-pkiUpgrade tomcatjssUpgrade pki-base | Mar 18, 2021 | Mar 12, 2021 |
| Redhat_linux | — | Upgrade pki-core-debuginfoUpgrade jss-debugsourceUpgrade python3-pkiUpgrade pki-base-javaUpgrade pki-caUpgrade jss-javadocUpgrade pki-serverUpgrade pki-toolsUpgrade pki-core-debugsourceUpgrade tomcatjssUpgrade pki-kraUpgrade jssUpgrade pki-baseUpgrade ldapjdk-javadocUpgrade pki-symkey-debuginfoNo solution existsUpgrade ldapjdkUpgrade jss-debuginfoUpgrade pki-tools-debuginfoUpgrade pki-javadocUpgrade pki-symkey | Mar 18, 2021 | Mar 15, 2021 |
| Rocky_linux | — | — | Aug 15, 2024 | Mar 15, 2021 |
| Ubuntu | — | Upgrade pki-kra (Ubuntu Pro)Upgrade pki-base (Ubuntu Pro)Upgrade pki-server (Ubuntu Pro)Upgrade pki-ca (Ubuntu Pro)Upgrade pki-tps (Ubuntu Pro)Upgrade pki-console (Ubuntu Pro)Upgrade libsymkey-java (Ubuntu Pro)Upgrade pki-tps-client (Ubuntu Pro)Upgrade dogtag-pki (Ubuntu Pro)Upgrade pki-tks (Ubuntu Pro)Upgrade pki-base-java (Ubuntu Pro)Upgrade libsymkey-jni (Ubuntu Pro)Upgrade python3-pki-base (Ubuntu Pro)Upgrade pki-ocsp (Ubuntu Pro)Upgrade pki-tools (Ubuntu Pro) | Nov 19, 2024 | Mar 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub