A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pki-symkeyUpgrade pki-caUpgrade pki-baseUpgrade jssUpgrade jss-javadocUpgrade ldapjdkUpgrade pki-toolsUpgrade pki-serverUpgrade python3-pkiUpgrade ldapjdk-javadocUpgrade pki-kraUpgrade tomcatjssUpgrade pki-base-java | May 4, 2022 | Mar 15, 2021 |
| Amazon Linux Ami 2 | — | Upgrade pki-kraUpgrade pki-caUpgrade pki-symkeyUpgrade pki-baseUpgrade pki-serverUpgrade pki-base-javaUpgrade pki-core-debuginfoUpgrade pki-javadocUpgrade pki-tools | Apr 23, 2021 | Mar 15, 2021 |
| Centos_linux | — | Upgrade jss-javadocUpgrade pki-caUpgrade pki-core-debugsourceUpgrade pki-core-debuginfoUpgrade jss-debuginfoUpgrade pki-base-javaUpgrade jss-debugsourceUpgrade pki-serverUpgrade pki-toolsUpgrade tomcatjssUpgrade python3-pkiUpgrade ldapjdk-javadocUpgrade pki-symkey-debuginfoUpgrade pki-kraUpgrade pki-symkeyUpgrade pki-tools-debuginfoUpgrade jssUpgrade pki-baseUpgrade pki-javadocUpgrade ldapjdk | Mar 18, 2021 | Mar 15, 2021 |
| Debian | — | Upgrade dogtag-pki | Jul 30, 2024 | Mar 15, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pki-symkeyUpgrade pki-kraUpgrade pki-base-javaUpgrade pki-caUpgrade pki-baseUpgrade pki-toolsUpgrade pki-server | Apr 30, 2021 | Mar 15, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pki-toolsUpgrade pki-base-javaUpgrade pki-symkeyUpgrade pki-serverUpgrade pki-kraUpgrade pki-caUpgrade pki-base | May 19, 2021 | Mar 15, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pki-symkey | May 18, 2021 | Mar 15, 2021 |
| Oracle_linux | — | Upgrade pki-symkeyUpgrade pki-kraUpgrade pki-javadocUpgrade pki-toolsUpgrade pki-serverUpgrade ldapjdk-javadocUpgrade jssUpgrade python3-pkiUpgrade pki-base-javaUpgrade pki-baseUpgrade pki-caUpgrade jss-javadocUpgrade tomcatjssUpgrade ldapjdk | Mar 18, 2021 | Mar 12, 2021 |
| Redhat_linux | — | Upgrade pki-core-debuginfoUpgrade pki-serverUpgrade pki-base-javaUpgrade python3-pkiUpgrade pki-toolsUpgrade pki-core-debugsourceUpgrade pki-caUpgrade jss-debugsourceUpgrade pki-kraUpgrade tomcatjssUpgrade jss-javadocUpgrade pki-symkey-debuginfoUpgrade ldapjdkUpgrade jssUpgrade jss-debuginfoUpgrade pki-tools-debuginfoUpgrade ldapjdk-javadocUpgrade pki-javadocUpgrade pki-baseUpgrade pki-symkeyNo solution exists | Mar 18, 2021 | Mar 15, 2021 |
| Rocky_linux | — | — | Aug 15, 2024 | Mar 15, 2021 |
| Ubuntu | — | Upgrade pki-kra (Ubuntu Pro)Upgrade libsymkey-java (Ubuntu Pro)Upgrade pki-base (Ubuntu Pro)Upgrade pki-tps (Ubuntu Pro)Upgrade pki-ca (Ubuntu Pro)Upgrade pki-server (Ubuntu Pro)Upgrade dogtag-pki (Ubuntu Pro)Upgrade pki-tps-client (Ubuntu Pro)Upgrade pki-console (Ubuntu Pro)Upgrade pki-ocsp (Ubuntu Pro)Upgrade pki-tks (Ubuntu Pro)Upgrade libsymkey-jni (Ubuntu Pro)Upgrade pki-base-java (Ubuntu Pro)Upgrade python3-pki-base (Ubuntu Pro)Upgrade pki-tools (Ubuntu Pro) | Nov 19, 2024 | Mar 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub