The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pki-kraUpgrade python3-pkiUpgrade pki-acmeUpgrade jss-javadocUpgrade tomcatjssUpgrade jssUpgrade pki-toolsUpgrade pki-serverUpgrade pki-baseUpgrade pki-caUpgrade ldapjdkUpgrade pki-symkeyUpgrade pki-base-javaUpgrade ldapjdk-javadoc | May 4, 2022 | Feb 16, 2022 |
| Centos_linux | — | Upgrade jss-debuginfoUpgrade pki-core-debuginfoUpgrade jssUpgrade pki-toolsUpgrade pki-acmeUpgrade jss-debugsourceUpgrade pki-caUpgrade pki-symkeyUpgrade ldapjdk-javadocUpgrade pki-tools-debuginfoUpgrade pki-baseUpgrade python3-pkiUpgrade tomcatjssUpgrade ldapjdkUpgrade pki-symkey-debuginfoUpgrade pki-kraUpgrade pki-core-debugsourceUpgrade pki-base-javaUpgrade jss-javadocUpgrade pki-server | Jun 4, 2021 | Jun 3, 2021 |
| Debian | — | No solution exists | May 15, 2025 | Feb 16, 2022 |
| Oracle_linux | — | Upgrade jssUpgrade pki-caUpgrade pki-toolsUpgrade pki-symkeyUpgrade pki-acmeUpgrade pki-baseUpgrade pki-kraUpgrade ldapjdk-javadocUpgrade jss-javadocUpgrade ldapjdkUpgrade tomcatjssUpgrade pki-serverUpgrade pki-base-javaUpgrade python3-pki | Jun 5, 2021 | Jun 3, 2021 |
| Redhat_linux | — | Upgrade pki-caUpgrade pki-core-debuginfoUpgrade pki-symkeyUpgrade pki-toolsUpgrade jssUpgrade pki-acmeUpgrade jss-debuginfoUpgrade pki-serverUpgrade pki-kraUpgrade pki-core-debugsourceUpgrade ldapjdkUpgrade jss-debugsourceUpgrade ldapjdk-javadocUpgrade python3-pkiUpgrade pki-base-javaUpgrade pki-symkey-debuginfoUpgrade pki-tools-debuginfoUpgrade tomcatjssUpgrade jss-javadocUpgrade pki-base | Jun 4, 2021 | Jun 3, 2021 |
| Rocky_linux | — | Upgrade jssUpgrade pki-tools-debuginfoUpgrade jss-debuginfoUpgrade pki-symkey-debuginfoUpgrade pki-symkeyUpgrade pki-core-debugsourceUpgrade pki-toolsUpgrade jss-debugsourceUpgrade jss-javadocUpgrade pki-core-debuginfo | May 5, 2022 | Feb 16, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub