TI-2022-02229 CVE-2022-2414 · GHSA-vjf8-hc3f-mpw4
XML external entity injection in Dogtag PKI
Priority HIGH 74
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks.
RHSA-2023:1747
pki-core:10.6 security update
Released 2023-04-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) jss-4.6.2-12.module+el8.2.0+10554+cf83aa72.src::pki-core:10.6, jss-4.6.2-12.module+el8.2.0+10554+cf83aa72.x86_64::pki-core:10.6, jss-javadoc-4.6.2-12.module+el8.2.0+10554+cf83aa72.x86_64::pki-core:10.6 +14
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) jss-4.6.2-12.module+el8.2.0+10554+cf83aa72.ppc64le::pki-core:10.6, jss-4.6.2-12.module+el8.2.0+10554+cf83aa72.src::pki-core:10.6, jss-4.6.2-12.module+el8.2.0+10554+cf83aa72.x86_64::pki-core:10.6 +18
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) jss-4.6.2-12.module+el8.2.0+10554+cf83aa72.src::pki-core:10.6, jss-4.6.2-12.module+el8.2.0+10554+cf83aa72.x86_64::pki-core:10.6, jss-javadoc-4.6.2-12.module+el8.2.0+10554+cf83aa72.x86_64::pki-core:10.6 +14