Red Hat Security Advisory

RHSA-2023:2293

pki-core security, bug fix, and enhancement update

Released 2023-05-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) idm-pki-acme-11.3.0-1.el9, idm-pki-base-11.3.0-1.el9, idm-pki-ca-11.3.0-1.el9 +7

TI-2022-02209 CVE-2022-2393 · GHSA-hjh3-jq28-5qcc

LOW 25

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00251 Published 2022-07-14 Partial fix CWE-285