Red Hat Security Advisory

RHSA-2022:7326

pki-core security update

Released 2022-11-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) pki-acme-11.0.6-2.el9_0, pki-base-11.0.6-2.el9_0, pki-base-java-11.0.6-2.el9_0 +7

TI-2022-02229 CVE-2022-2414 · GHSA-vjf8-hc3f-mpw4

HIGH 74

Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.85393 Published 2022-07-29 Partial fix CWE-611