Every CVE Search/ Get API key

CVE-2021-20179

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this...

8.1 HighFix available

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

1.22%Down 0.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.1

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

Record
CVE-2021-20179
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0
5.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:N
Weakness
CWE-863
Updated
2026-11-02
CVE List No score

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

Record
CVE-2021-20179
Weakness
CWE-863
Updated
2026-11-02
EUVDEUVD-2021-7635 No score

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

Record
EUVD-2021-7635
Updated
2026-11-03
GitHub AdvisoriesGHSA-q87w-gh3f-77p7 8.1

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this...

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

Record
GHSA-q87w-gh3f-77p7
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-863
Updated
2026-11-02
OSV 8.1

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

Record
CVE-2021-20179
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2021-20179 8.1

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

Record
DEBIAN-CVE-2021-20179
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
Show 8 moreShow less
OSVRHSA-2021:0819 8.1

Red Hat Security Advisory: pki-core security update

Record
RHSA-2021:0819
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:0851 8.1

Red Hat Security Advisory: pki-core security and bug fix update

Record
RHSA-2021:0851
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:0966 8.1

Red Hat Security Advisory: pki-core:10.6 security update

Record
RHSA-2021:0966
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:0975 8.1

Red Hat Security Advisory: pki-core security update

Record
RHSA-2021:0975
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:1263 8.1

Red Hat Security Advisory: pki-core:10.6 security and bug fix update

Record
RHSA-2021:1263
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2021:0966 8.1

Important: pki-core:10.6 security update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.

Security Fix(es):

  • pki-core: Unprivileged users can renew any certificate (CVE-2021-20179)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2021:0966
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2021-20179 8.1

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

Record
UBUNTU-CVE-2021-20179
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUSN-8158-1 No score

dogtag-pki vulnerability

Fraser Tweedale and Geetika Kapoor discovered that Dogtag PKI could renew a certificate without proper authentication. An attacker could possibly use this to repeatedly renew a compromised certificate and maintain unauthorized access to a system or resource.

Record
USN-8158-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dogtag-pki
Debian:11
 before 10.10.2-2
10.10.2-2
pki-base
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-base-java
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-ca
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-core
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-core-debuginfo
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-javadoc
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-kra
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-server
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-symkey
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
Show 114 moreShow less
Affected packages
PackageAffectedFixed
pki-tools
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-base
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-base-java
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-ca
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-core
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-core-debuginfo
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-kra
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-server
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-symkey
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-tools
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-javadoc
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-base
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base-java
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-ca
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-kra
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-server
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-symkey
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-tools
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base-java
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-ca
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-kra
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-server
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-symkey
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-tools
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base-java
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-ca
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-kra
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-server
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-symkey
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base-java
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-ca
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-kra
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-server
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-symkey
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-tools
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
jss
Red Hat:enterprise_linux:8::appstream
 before 0:4.7.3-1.module+el8.3.0+8058+d5cd4219
0:4.7.3-1.module+el8.3.0+8058+d5cd4219
jss-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.7.3-1.module+el8.3.0+8058+d5cd4219
0:4.7.3-1.module+el8.3.0+8058+d5cd4219
jss-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.7.3-1.module+el8.3.0+8058+d5cd4219
0:4.7.3-1.module+el8.3.0+8058+d5cd4219
jss-javadoc
Red Hat:enterprise_linux:8::appstream
 before 0:4.7.3-1.module+el8.3.0+8058+d5cd4219
0:4.7.3-1.module+el8.3.0+8058+d5cd4219
ldapjdk
Red Hat:enterprise_linux:8::appstream
 before 0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
ldapjdk-javadoc
Red Hat:enterprise_linux:8::appstream
 before 0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
pki-base
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-3.module+el8.3.0+10353+73f6df5b
0:10.9.4-3.module+el8.3.0+10353+73f6df5b
pki-base-java
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-3.module+el8.3.0+10353+73f6df5b
0:10.9.4-3.module+el8.3.0+10353+73f6df5b
pki-ca
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-3.module+el8.3.0+10353+73f6df5b
0:10.9.4-3.module+el8.3.0+10353+73f6df5b
pki-core
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-3.module+el8.3.0+10353+73f6df5b
0:10.9.4-3.module+el8.3.0+10353+73f6df5b
pki-core-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-3.module+el8.3.0+10353+73f6df5b
0:10.9.4-3.module+el8.3.0+10353+73f6df5b
pki-core-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-3.module+el8.3.0+10353+73f6df5b
0:10.9.4-3.module+el8.3.0+10353+73f6df5b
pki-kra
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-3.module+el8.3.0+10353+73f6df5b
0:10.9.4-3.module+el8.3.0+10353+73f6df5b
pki-server
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-3.module+el8.3.0+10353+73f6df5b
0:10.9.4-3.module+el8.3.0+10353+73f6df5b
pki-symkey
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-3.module+el8.3.0+10353+73f6df5b
0:10.9.4-3.module+el8.3.0+10353+73f6df5b
pki-symkey-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-3.module+el8.3.0+10353+73f6df5b
0:10.9.4-3.module+el8.3.0+10353+73f6df5b
pki-tools
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-3.module+el8.3.0+10353+73f6df5b
0:10.9.4-3.module+el8.3.0+10353+73f6df5b
pki-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-3.module+el8.3.0+10353+73f6df5b
0:10.9.4-3.module+el8.3.0+10353+73f6df5b
python3-pki
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-3.module+el8.3.0+10353+73f6df5b
0:10.9.4-3.module+el8.3.0+10353+73f6df5b
tomcatjss
Red Hat:enterprise_linux:8::appstream
 before 0:7.5.0-1.module+el8.3.0+7355+c59bcbd9
0:7.5.0-1.module+el8.3.0+7355+c59bcbd9
pki-base
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-base-java
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-ca
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-core
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-core-debuginfo
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-javadoc
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-kra
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-server
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-symkey
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-tools
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-base
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-base-java
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-ca
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-core
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-core-debuginfo
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-kra
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-server
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-symkey
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-tools
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-javadoc
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
jss
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:4.6.2-12.module+el8.2.0+10554+cf83aa72
0:4.6.2-12.module+el8.2.0+10554+cf83aa72
jss-debuginfo
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:4.6.2-12.module+el8.2.0+10554+cf83aa72
0:4.6.2-12.module+el8.2.0+10554+cf83aa72
jss-debugsource
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:4.6.2-12.module+el8.2.0+10554+cf83aa72
0:4.6.2-12.module+el8.2.0+10554+cf83aa72
jss-javadoc
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:4.6.2-12.module+el8.2.0+10554+cf83aa72
0:4.6.2-12.module+el8.2.0+10554+cf83aa72
ldapjdk
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:4.21.0-2.module+el8.2.0+6294+b7db4606
0:4.21.0-2.module+el8.2.0+6294+b7db4606
ldapjdk-javadoc
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:4.21.0-2.module+el8.2.0+6294+b7db4606
0:4.21.0-2.module+el8.2.0+6294+b7db4606
pki-base
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-base-java
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-ca
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-core
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-core-debuginfo
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-core-debugsource
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-kra
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-server
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-symkey
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-symkey-debuginfo
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-tools
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-tools-debuginfo
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
python3-pki
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
tomcatjss
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:7.4.1-2.module+el8.2.0+6294+b7db4606
0:7.4.1-2.module+el8.2.0+6294+b7db4606
ldapjdk
Rocky Linux:8
 before 0:4.22.0-1.module+el8.4.0+418+b7ae1d4a
0:4.22.0-1.module+el8.4.0+418+b7ae1d4a
dogtag-pki
Ubuntu:Pro:18.04:LTS
 before 10.6.0-1ubuntu2+esm1, plus listed versions
10.3.5+12-4ubuntu110.3.5+12-510.5.3-310.5.3-410.5.5-110.6.0~beta2-310.6.0-1ubuntu110.6.0-1ubuntu2
10.6.0-1ubuntu2+esm1
dogtag-pki
Ubuntu:Pro:20.04:LTS
 before 10.8.3-1ubuntu1+esm1, plus listed versions
10.7.3-410.8.3-1ubuntu1
10.8.3-1ubuntu1+esm1

History

History
RecordedChangedSources
affected, facts
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-20179 is a high vulnerability (CVSS 8.1) in [unknown] Pki-core, published March 15, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.22%, the 68th percentile. Fixed in dogtag-pki 10.10.2-2.

References

Show 54 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open