Red Hat Security Advisory

RHSA-2022:8915

Red Hat Certificate System 9.7 security update

Released 2022-12-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7 pki-core-10.5.18-24.el7pki, pki-ocsp-10.5.18-24.el7pki, pki-tks-10.5.18-24.el7pki +1

TI-2022-02229 CVE-2022-2414 · GHSA-vjf8-hc3f-mpw4

HIGH 74

Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.85393 Published 2022-07-29 Partial fix CWE-611