Red Hat Security AdvisoryRHSA-2017:2335
pki-core security update
Released 2017-08-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) pki-base-10.4.1-11.el7, pki-base-java-10.4.1-11.el7, pki-ca-10.4.1-11.el7 +6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) pki-base-10.4.1-11.el7, pki-base-java-10.4.1-11.el7, pki-ca-10.4.1-11.el7 +6
- Red Hat Enterprise Linux Server (v. 7) pki-base-10.4.1-11.el7, pki-base-java-10.4.1-11.el7, pki-ca-10.4.1-11.el7 +5
- Red Hat Enterprise Linux Server Optional (v. 7) pki-base-10.4.1-11.el7, pki-base-java-10.4.1-11.el7, pki-ca-10.4.1-11.el7 +6
- Red Hat Enterprise Linux Workstation (v. 7) pki-base-10.4.1-11.el7, pki-base-java-10.4.1-11.el7, pki-ca-10.4.1-11.el7 +5
- Red Hat Enterprise Linux Workstation Optional (v. 7) pki-javadoc-10.4.1-11.el7
Fixes 1 record
Priority LOW 36
It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01458 · Published 2018-07-26 · Fixed CWE-592
