Jss Cryptomanager Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jss Cryptomanager Project records in CISA KEV

No Jss Cryptomanager Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jss Cryptomanager 1 record LOW

Records

1 record in Jss Cryptomanager · all components

TI-2019-11028 CVE-2019-14823 · GHSA-45q2-f3rm-5r6v

Improper certificate validation in Dogtag JSS

LOW 34

A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00859 Published 2019-10-14 Fixed CWE-358

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0