Search CVE reports
21 – 23 of 23 results
Some fixes available 1 of 3
It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication...
1 affected package
dogtag-pki
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dogtag-pki | — | Not in release | Not affected | Not affected | Not affected |
Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and deny rules to be reversed. If a server is configured to process allow...
1 affected package
dogtag-pki
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dogtag-pki | — | Not in release | Not affected | Not affected | Not affected |
Multiple temporary file creation vulnerabilities in pki-core 10.2.0.
1 affected package
dogtag-pki
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dogtag-pki | — | — | — | — | Ignored |