Red Hat Security AdvisoryRHSA-2021:2235
pki-core:10.6 security update
Released 2021-06-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) jss-4.8.1-2.module+el8.4.0+10451+3e5b5448.aarch64::pki-core:10.6, jss-4.8.1-2.module+el8.4.0+10451+3e5b5448.ppc64le::pki-core:10.6, jss-4.8.1-2.module+el8.4.0+10451+3e5b5448.s390x::pki-core:10.6 +27
Fixes 1 record
Priority LOW 33
A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00186 · Published 2022-02-16 · Partial fix CWE-312
