TI-2021-03479 CVE-2021-20179 · GHSA-q87w-gh3f-77p7
Incorrect authorization in pki-core
Priority LOW 38
A flaw was found in pki-core.
RHSA-2021:0975
pki-core security update
Released 2021-03-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) pki-base-10.5.16-7.el7_7, pki-base-java-10.5.16-7.el7_7, pki-ca-10.5.16-7.el7_7 +6
- Red Hat Enterprise Linux Server EUS (v. 7.7) pki-base-10.5.16-7.el7_7, pki-base-java-10.5.16-7.el7_7, pki-ca-10.5.16-7.el7_7 +5
- Red Hat Enterprise Linux Server Optional EUS (v. 7.7) pki-base-10.5.16-7.el7_7, pki-base-java-10.5.16-7.el7_7, pki-ca-10.5.16-7.el7_7 +6
Fixes 6 records
TI-2020-15729 CVE-2020-25715 · GHSA-cg99-xqcm-67pf
Cross-site scripting in pki-core
Priority LOW 30
A flaw was found in pki-core 10.9.0.
TI-2019-07541 CVE-2019-10221 · GHSA-wfff-rc4w-hpx2
Cross-site scripting in [UNKNOWN] pki-core
Priority LOW 30
A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server.
TI-2020-01665 CVE-2020-1721 · GHSA-j9fq-77vj-2ww7
Cross-site scripting in pki-core
Priority LOW 29
A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a key recovery request, enabling a reflected cross-site scripting (XSS) vul…
TI-2019-07500 CVE-2019-10179 · GHSA-rwmx-694x-q86h
Cross-site scripting in [UNKNOWN] pki-core/pki-kra
Priority LOW 29
A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery request search page, enabling a Reflected Cross Site Scripting (XSS) vuln…
TI-2019-07469 CVE-2019-10146 · GHSA-9wr3-2hgg-f56c
Cross-site scripting in Red Hat pki-core
Priority LOW 23
A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page.