TI-2022-02229 CVE-2022-2414 · GHSA-vjf8-hc3f-mpw4
XML external entity injection in Dogtag PKI
Priority HIGH 74
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks.
RHSA-2022:8799
pki-core security update
Released 2022-12-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) pki-base-10.5.18-24.el7_9, pki-base-java-10.5.18-24.el7_9, pki-ca-10.5.18-24.el7_9 +6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) pki-base-10.5.18-24.el7_9, pki-base-java-10.5.18-24.el7_9, pki-ca-10.5.18-24.el7_9 +6
- Red Hat Enterprise Linux Server (v. 7) pki-base-10.5.18-24.el7_9, pki-base-java-10.5.18-24.el7_9, pki-ca-10.5.18-24.el7_9 +5
- Red Hat Enterprise Linux Server Optional (v. 7) pki-base-10.5.18-24.el7_9, pki-base-java-10.5.18-24.el7_9, pki-ca-10.5.18-24.el7_9 +6
- Red Hat Enterprise Linux Workstation (v. 7) pki-base-10.5.18-24.el7_9, pki-base-java-10.5.18-24.el7_9, pki-ca-10.5.18-24.el7_9 +5
- Red Hat Enterprise Linux Workstation Optional (v. 7) pki-javadoc-10.5.18-24.el7_9