Improper authorization in pki-core
Priority LOW 25CWE-285Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Partial Red Hat: 9 fixed, 3 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-285.
Summary
A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.
Why it matters now
EPSS 0.00251 16th percentileScored 2026-11-07
Fix Partial Red Hat: 4 advisoriesRed Hat: 9 fixed, 3 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | pki-core | pki-core versions 10.12.4 and prior are affected. | — | No fix listed | CNA |
- pki-core Vendor— Affected pki-core versions 10.12.4 and prior are affected. Fixed in — No fix listed CNA
CPE configurations NVD · 7
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:pki-core_project:pki-core:*:*:*:*:*:*:*:* | up to 10.12.4 | Vulnerable | The pki-core Project |
| cpe:2.3:a:redhat:certificate_system:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:certificate_system:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
- cpe:2.3:a:pki-core_project:pki-core:*:*:*:*:*:*:*:* Versions up to 10.12.4 Vulnerable ·The pki-core Project
- cpe:2.3:a:redhat:certificate_system:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:certificate_system:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
Remediation
Red Hat 4 advisories
- RHSA-2023:3394 Released 2023-05-31 · Red Hat rating Importantpki-core:10.6 security update
- Red Hat Enterprise Linux AppStream EUS (v.8.6) jss-4.9.3-1.module+el8.6.0+14244+60d461b7.aarch64::pki-core:10.6, jss-4.9.3-1.module+el8.6.0+14244+60d461b7.ppc64le::pki-core:10.6, jss-4.9.3-1.module+el8.6.0+14244+60d461b7.s390x::pki-core:10.6 +27
- RHSA-2023:2293 Released 2023-05-09 · Red Hat rating Moderatepki-core security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 9) idm-pki-acme-11.3.0-1.el9, idm-pki-base-11.3.0-1.el9, idm-pki-ca-11.3.0-1.el9 +7
- RHSA-2022:7086 Released 2022-10-24 · Red Hat rating Moderatepki-core security update
- Red Hat Enterprise Linux Client Optional (v. 7) pki-base-10.5.18-23.el7_9, pki-base-java-10.5.18-23.el7_9, pki-ca-10.5.18-23.el7_9 +6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) pki-base-10.5.18-23.el7_9, pki-base-java-10.5.18-23.el7_9, pki-ca-10.5.18-23.el7_9 +6
- Red Hat Enterprise Linux Server (v. 7) pki-base-10.5.18-23.el7_9, pki-base-java-10.5.18-23.el7_9, pki-ca-10.5.18-23.el7_9 +5
- Red Hat Enterprise Linux Server Optional (v. 7) pki-base-10.5.18-23.el7_9, pki-base-java-10.5.18-23.el7_9, pki-ca-10.5.18-23.el7_9 +6
- Red Hat Enterprise Linux Workstation (v. 7) pki-base-10.5.18-23.el7_9, pki-base-java-10.5.18-23.el7_9, pki-ca-10.5.18-23.el7_9 +5
- Red Hat Enterprise Linux Workstation Optional (v. 7) pki-javadoc-10.5.18-23.el7_9
Show 1 more Red Hat advisories
- RHSA-2022:7077 Released 2022-10-24 · Red Hat rating ModerateRed Hat Certificate System 9.7 CVE bug fix update
- Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7 pki-core-10.5.18-23.el7pki, pki-ocsp-10.5.18-23.el7pki, pki-tks-10.5.18-23.el7pki +1
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Certificate System 10 | Affected | No fix yet |
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 8 | Affected | No fix yet |
| Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7 | Fixed | RHSA-2022:7077 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2023:2293 |
| Red Hat Enterprise Linux AppStream EUS (v.8.6) | Fixed | RHSA-2023:3394 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2022:7086 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2022:7086 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2022:7086 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2022:7086 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2022:7086 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2022:7086 |
Not affected: 2 products
- Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
- Red Hat Enterprise Linux AppStream (v. 9)
Timeline
- 2026-10-02 Threatist record created from CVE-2022-2393
- 2026-10-03 Alias added: GHSA-hjh3-jq28-5qcc
References
Sources
- CVE-2022-2393 · CVE Program
- CVE-2022-2393 · NVD
- FIRST EPSS
- GHSA-hjh3-jq28-5qcc · GitHub Advisory Database · CC BY 4.0
- CVE-2022-2393 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences