Read the docs
TI-2020-01665 Aliases CVE-2020-1721GHSA-j9fq-77vj-2ww7

Cross-site scripting in pki-core

Priority LOW 29CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-79.

Summary

A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a key recovery request, enabling a reflected cross-site scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.

Why it matters now

EPSS 0.00981 62nd percentileScored 2026-11-07
Fix Fixed Red Hat: 4 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—pki-corepki-core 10.10.5—No fix listedCNA
  • pki-core Vendor— Affected pki-core 10.10.5 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:dogtagpki:dogtagpki:10.10.5:*:*:*:*:*:*:*10.10.5VulnerableDogtag PKI
  • cpe:2.3:a:dogtagpki:dogtagpki:10.10.5:*:*:*:*:*:*:* Versions 10.10.5 Vulnerable ·Dogtag PKI

Remediation

Red Hat 4 advisories

  • RHSA-2021:0975 Released 2021-03-23 · Red Hat rating Important
    pki-core security update
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) pki-base-10.5.16-7.el7_7, pki-base-java-10.5.16-7.el7_7, pki-ca-10.5.16-7.el7_7 +6
    • Red Hat Enterprise Linux Server EUS (v. 7.7) pki-base-10.5.16-7.el7_7, pki-base-java-10.5.16-7.el7_7, pki-ca-10.5.16-7.el7_7 +5
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.7) pki-base-10.5.16-7.el7_7, pki-base-java-10.5.16-7.el7_7, pki-ca-10.5.16-7.el7_7 +6
  • RHSA-2021:0851 Released 2021-03-16 · Red Hat rating Important
    pki-core security and bug fix update
    • Red Hat Enterprise Linux Client Optional (v. 7) pki-base-10.5.18-12.el7_9, pki-base-java-10.5.18-12.el7_9, pki-ca-10.5.18-12.el7_9 +6
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) pki-base-10.5.18-12.el7_9, pki-base-java-10.5.18-12.el7_9, pki-ca-10.5.18-12.el7_9 +6
    • Red Hat Enterprise Linux Server (v. 7) pki-base-10.5.18-12.el7_9, pki-base-java-10.5.18-12.el7_9, pki-ca-10.5.18-12.el7_9 +5
    • Red Hat Enterprise Linux Server Optional (v. 7) pki-base-10.5.18-12.el7_9, pki-base-java-10.5.18-12.el7_9, pki-ca-10.5.18-12.el7_9 +6
    • Red Hat Enterprise Linux Workstation (v. 7) pki-base-10.5.18-12.el7_9, pki-base-java-10.5.18-12.el7_9, pki-ca-10.5.18-12.el7_9 +5
    • Red Hat Enterprise Linux Workstation Optional (v. 7) pki-javadoc-10.5.18-12.el7_9
  • RHSA-2021:0819 Released 2021-03-15 · Red Hat rating Important
    pki-core security update
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) pki-base-10.5.9-15.el7_6, pki-base-java-10.5.9-15.el7_6, pki-ca-10.5.9-15.el7_6 +6
    • Red Hat Enterprise Linux Server EUS (v. 7.6) pki-base-10.5.9-15.el7_6, pki-base-java-10.5.9-15.el7_6, pki-ca-10.5.9-15.el7_6 +5
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.6) pki-base-10.5.9-15.el7_6, pki-base-java-10.5.9-15.el7_6, pki-ca-10.5.9-15.el7_6 +6
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) pki-base-10.5.9-15.el7_6, pki-base-java-10.5.9-15.el7_6, pki-ca-10.5.9-15.el7_6 +3
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) pki-base-10.5.9-15.el7_6, pki-base-java-10.5.9-15.el7_6, pki-ca-10.5.9-15.el7_6 +6
Show 1 more Red Hat advisories
  • RHSA-2020:4847 Released 2020-11-04 · Red Hat rating Moderate
    pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 8) apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6, apache-commons-collections-3.2.2-10.module+el8.1.0+3366+6dfb954c.src::pki-deps:10.6, apache-commons-lang-2.6-21.module+el8.1.0+3366+6dfb954c.noarch::pki-deps:10.6 +47

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2020:4847
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2021:0851
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2021:0851
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)Fixed RHSA-2021:0819
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)Fixed RHSA-2021:0975
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2021:0851
Red Hat Enterprise Linux Server EUS (v. 7.6)Fixed RHSA-2021:0819
Red Hat Enterprise Linux Server EUS (v. 7.7)Fixed RHSA-2021:0975
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2021:0851
Red Hat Enterprise Linux Server Optional EUS (v. 7.6)Fixed RHSA-2021:0819
Red Hat Enterprise Linux Server Optional EUS (v. 7.7)Fixed RHSA-2021:0975
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2021:0851
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2021:0851
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2021:0819
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2021:0819

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-1721
  2. 2026-10-03 Alias added: GHSA-j9fq-77vj-2ww7

References

Patch 1

  • TI-2022-02229 XML external entity injection in Dogtag PKI CVSS 3.1HIGH 7.5
  • TI-2021-03479 Incorrect authorization in pki-core CVSS 3.1HIGH 8.1
  • TI-2018-00999 Improper access control in [UNKNOWN] pki-core CVSS 3.0HIGH 8.1
  • TI-2017-05178 Hard-coded credentials in Dogtag PKI pki-core CVSS 3.0HIGH 7.5
  • TI-2021-02504 Cleartext storage of sensitive information in pki-server CVSS 3.1HIGH 7.8
  • TI-2020-12392 In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable… CVSS 3.1MEDIUM 6.8
See all 13 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences