TI-2022-02229 CVE-2022-2414 · GHSA-vjf8-hc3f-mpw4
XML external entity injection in Dogtag PKI
Priority HIGH 74
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks.
RHSA-2022:7470
pki-core:10.6 and pki-deps:10.6 security and bug fix update
Released 2022-11-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) idm-pki-acme-10.12.0-4.module+el8.7.0+16126+c5918a27.noarch::pki-core:10.6, idm-pki-base-10.12.0-4.module+el8.7.0+16126+c5918a27.noarch::pki-core:10.6, idm-pki-base-java-10.12.0-4.module+el8.7.0+16126+c5918a27.noarch::pki-core:10.6 +14