Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 14

Export CSV
CVE-2022-2414

pki-core: access to external entities when parsing XML can lead to XXE

Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.

CVSS 3.1 · 7.5 High EPSS 85.4% KEV · Not listed
Vendors
Dogtagpki Redhat
Products
Dogtagpki Certificate System Enterprise Linux and 4 more
CVE-2021-3551

pki-server: Dogtag installer "pkispawn" logs admin credentials into a world-readable log file

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Dogtagpki Fedoraproject Oracle and 1 more
Products
Dogtagpki Fedora Linux and 9 more
CVE-2021-20179

pki-core: Unprivileged users can renew any certificate

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

CVSS 3.1 · 8.1 High EPSS 1.2% KEV · Not listed
Vendors
Dogtagpki Fedoraproject Redhat
Products
Dogtagpki Fedora Certificate System and 2 more
CVE-2020-25715

pki-core: XSS in the certificate search results

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Dogtagpki Redhat
Products
Dogtagpki Enterprise Linux Rhel Eus
CVE-2020-1721

pki-core: KRA vulnerable to reflected XSS via the getPk12 page

A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a key recovery request, enabling a reflected cross-site scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dogtagpki Redhat
Products
Dogtagpki Enterprise Linux Rhel Eus
CVE-2020-1696

pki-core: Stored XSS in TPS profile creation

A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Dogtagpki Redhat
Products
Dogtagpki Certificate System Certificate System Eus
CVE-2020-15720

pki: Dogtag's python client does not validate certificates

In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests certificate validation. Since the verify parameter was hard-coded in all request functions, it was not possible to override the setting. As a result, tools making use of this class, such as the pki-server command, may have been vulnerable to Person-in-the-Middle attacks in certain non-localhost use cases. This is fixed in 10.9.0-b1.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Dogtagpki Redhat
Products
Dogtagpki Enterprise Linux
CVE-2019-10221

pki-core: Reflected XSS in getcookies?url= endpoint in CA

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.

CVSS 3.1 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Dogtagpki Redhat
Products
Dogtagpki Enterprise Linux Rhel Eus
CVE-2019-10180

pki-core: unsanitized token parameters in TPS resulting in stored XSS

A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly resulting in a Stored Cross Site Scripting (XSS) vulnerability. An attacker able to modify the parameters of any token could use this flaw to trick an authenticated user into executing arbitrary JavaScript code.

CVSS 3.1 · 2.4 Low EPSS < 1% KEV · Not listed
Vendors
Dogtagpki Redhat
Products
Dogtagpki Certificate System Certificate System Eus
CVE-2019-10179

pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab

A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery request search page, enabling a Reflected Cross Site Scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Dogtagpki Redhat
Products
Dogtagpki Enterprise Linux Rhel Eus
CVE-2019-10178

pki-core: stored Cross-site scripting (XSS) in the pki-tps web Activity tab

It was found that the Token Processing Service (TPS) did not properly sanitize the Token IDs from the "Activity" page, enabling a Stored Cross Site Scripting (XSS) vulnerability. An unauthenticated attacker could trick an authenticated victim into creating a specially crafted activity, which would execute arbitrary JavaScript code when viewed in a browser. All versions of pki-core are believed to be vulnerable.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Dogtagpki Redhat
Products
Dogtagpki Certificate System Certificate System Eus
CVE-2019-10146

pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page

A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially crafted value that will be executed on the victim's browser.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Dogtagpki Redhat
Products
Dogtagpki Enterprise Linux Rhel Eus
CVE-2018-1080

pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access

Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and deny rules to be reversed. If a server is configured to process allow rules before deny rules (authz.evaluateOrder=allow,deny), then allow rules will deny access and deny rules will grant access. This may result in an escalation of privileges or have other unintended consequences.

CVSS 3.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Dogtagpki Redhat
Products
Dogtagpki Enterprise Linux
CVE-2017-7537

pki-core: mock CMC authentication plugin with hardcoded secret enabled by default

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

CVSS 3.0 · 5.9 Medium EPSS 1.5% KEV · Not listed
Vendors
Dogtagpki Redhat
Products
Dogtagpki Enterprise Linux Enterprise Linux Desktop and 2 more