Red Hat Security AdvisoryRHSA-2022:7077
Red Hat Certificate System 9.7 CVE bug fix update
Released 2022-10-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7 pki-core-10.5.18-23.el7pki, pki-ocsp-10.5.18-23.el7pki, pki-tks-10.5.18-23.el7pki +1
Fixes 1 record
Priority LOW 25
A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled.
CVSS 3.1MEDIUM 5.7· Adjacent network · Low privileges · No interaction · EPSS 0.00251 · Published 2022-07-14 · Partial fix CWE-285
