Every CVE Search/ Get API key

CVE-2022-2393

A flaw was found in pki-core, which could allow a user to get a certificate for another user...

5.7 MediumFix available

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.25%Down 0.6 points since Jul 15, 2022
90%50%10%1%

What each source reports

NVD Score used 5.7

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

Record
CVE-2022-2393
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-285
Updated
2026-11-02
CVE List No score

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

Record
CVE-2022-2393
Weakness
CWE-285
Updated
2026-11-02
EUVDEUVD-2022-34658 No score

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

Record
EUVD-2022-34658
Updated
2026-11-03
GitHub AdvisoriesGHSA-hjh3-jq28-5qcc 5.7

A flaw was found in pki-core, which could allow a user to get a certificate for another user...

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

Record
GHSA-hjh3-jq28-5qcc
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-285, CWE-287
Updated
2026-11-02
OSV 5.7

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

Record
CVE-2022-2393
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2022-2393 5.7

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

Record
DEBIAN-CVE-2022-2393
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 6 moreShow less
OSVRHSA-2022:7077 7.6

Red Hat Security Advisory: Red Hat Certificate System 9.7 CVE bug fix update

Record
RHSA-2022:7077
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Updated
2026-11-02
OSVRHSA-2022:7086 7.6

Red Hat Security Advisory: pki-core security update

Record
RHSA-2022:7086
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Updated
2026-11-02
OSVRHSA-2023:2293 7.6

Red Hat Security Advisory: pki-core security, bug fix, and enhancement update

Record
RHSA-2023:2293
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Updated
2026-11-02
OSVRHSA-2023:3394 7.6

Red Hat Security Advisory: pki-core:10.6 security update

Record
RHSA-2023:3394
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2022-2393 5.7

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

Record
UBUNTU-CVE-2022-2393
CVSS 3.1
5.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALSA-2023:2293 No score

Moderate: pki-core security, bug fix, and enhancement update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.

Security Fix(es):

  • pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field (CVE-2022-2393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2293
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
idm-pki-acme
AlmaLinux:9
 before 11.3.0-1.el9
11.3.0-1.el9
idm-pki-base
AlmaLinux:9
 before 11.3.0-1.el9
11.3.0-1.el9
idm-pki-ca
AlmaLinux:9
 before 11.3.0-1.el9
11.3.0-1.el9
idm-pki-est
AlmaLinux:9
 before 11.3.0-1.el9
11.3.0-1.el9
idm-pki-java
AlmaLinux:9
 before 11.3.0-1.el9
11.3.0-1.el9
idm-pki-kra
AlmaLinux:9
 before 11.3.0-1.el9
11.3.0-1.el9
idm-pki-server
AlmaLinux:9
 before 11.3.0-1.el9
11.3.0-1.el9
idm-pki-tools
AlmaLinux:9
 before 11.3.0-1.el9
11.3.0-1.el9
python3-idm-pki
AlmaLinux:9
 before 11.3.0-1.el9
11.3.0-1.el9
dogtag-pki
Debian:11
 All versions, plus listed versions
10.10.2-310.10.6-111.0.0-111.0.3-111.0.3-2
Show 6 moreShow less
11.0.3-311.0.3-411.0.6-111.0.6-211.2.1-111.2.1-2
 None known
Show 80 moreShow less
Affected packages
PackageAffectedFixed
pki-core
Red Hat:certificate_system:9.7::el7
 before 0:10.5.18-23.el7pki
0:10.5.18-23.el7pki
pki-core-debuginfo
Red Hat:certificate_system:9.7::el7
 before 0:10.5.18-23.el7pki
0:10.5.18-23.el7pki
pki-ocsp
Red Hat:certificate_system:9.7::el7
 before 0:10.5.18-23.el7pki
0:10.5.18-23.el7pki
pki-tks
Red Hat:certificate_system:9.7::el7
 before 0:10.5.18-23.el7pki
0:10.5.18-23.el7pki
pki-tps
Red Hat:certificate_system:9.7::el7
 before 0:10.5.18-23.el7pki
0:10.5.18-23.el7pki
pki-base
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-base-java
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-ca
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-core
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-kra
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-server
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-symkey
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-tools
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-base
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-base-java
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-ca
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-core
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-kra
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-server
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-symkey
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-tools
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-base
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-base-java
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-ca
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-core
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-kra
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-server
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-symkey
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-tools
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-base
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-base-java
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-ca
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-core
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-kra
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-server
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-symkey
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-tools
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-23.el7_9
0:10.5.18-23.el7_9
idm-pki-acme
Red Hat:enterprise_linux:9::appstream
 before 0:11.3.0-1.el9
0:11.3.0-1.el9
idm-pki-base
Red Hat:enterprise_linux:9::appstream
 before 0:11.3.0-1.el9
0:11.3.0-1.el9
idm-pki-ca
Red Hat:enterprise_linux:9::appstream
 before 0:11.3.0-1.el9
0:11.3.0-1.el9
idm-pki-est
Red Hat:enterprise_linux:9::appstream
 before 0:11.3.0-1.el9
0:11.3.0-1.el9
idm-pki-java
Red Hat:enterprise_linux:9::appstream
 before 0:11.3.0-1.el9
0:11.3.0-1.el9
idm-pki-kra
Red Hat:enterprise_linux:9::appstream
 before 0:11.3.0-1.el9
0:11.3.0-1.el9
idm-pki-server
Red Hat:enterprise_linux:9::appstream
 before 0:11.3.0-1.el9
0:11.3.0-1.el9
idm-pki-tools
Red Hat:enterprise_linux:9::appstream
 before 0:11.3.0-1.el9
0:11.3.0-1.el9
pki-core
Red Hat:enterprise_linux:9::appstream
 before 0:11.3.0-1.el9
0:11.3.0-1.el9
python3-idm-pki
Red Hat:enterprise_linux:9::appstream
 before 0:11.3.0-1.el9
0:11.3.0-1.el9
jss
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:4.9.3-1.module+el8.6.0+14244+60d461b7
0:4.9.3-1.module+el8.6.0+14244+60d461b7
jss-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:4.9.3-1.module+el8.6.0+14244+60d461b7
0:4.9.3-1.module+el8.6.0+14244+60d461b7
jss-debugsource
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:4.9.3-1.module+el8.6.0+14244+60d461b7
0:4.9.3-1.module+el8.6.0+14244+60d461b7
jss-javadoc
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:4.9.3-1.module+el8.6.0+14244+60d461b7
0:4.9.3-1.module+el8.6.0+14244+60d461b7
ldapjdk
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:4.23.0-1.module+el8.5.0+11983+6ba118b4
0:4.23.0-1.module+el8.5.0+11983+6ba118b4
ldapjdk-javadoc
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:4.23.0-1.module+el8.5.0+11983+6ba118b4
0:4.23.0-1.module+el8.5.0+11983+6ba118b4
pki-acme
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
pki-base
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
pki-base-java
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
pki-ca
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
pki-core
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
pki-core-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
pki-core-debugsource
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
pki-kra
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
pki-server
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
pki-symkey
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
pki-symkey-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
pki-tools
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
pki-tools-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
python3-pki
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:10.12.7-1.module+el8.6.0+18623+dea80f17
0:10.12.7-1.module+el8.6.0+18623+dea80f17
tomcatjss
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:7.7.1-1.module+el8.6.0+13291+248751b1
0:7.7.1-1.module+el8.6.0+13291+248751b1
dogtag-pki
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
10.2.6-110.2.6-210.2.6-310.2.6+git20160317-110.2.6+git20160317-1ubuntu0.1~esm1
 None known
dogtag-pki
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
10.3.5+12-4ubuntu110.3.5+12-510.5.3-310.5.3-410.5.5-1
Show 4 moreShow less
10.6.0~beta2-310.6.0-1ubuntu110.6.0-1ubuntu210.6.0-1ubuntu2+esm1
 None known
dogtag-pki
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
10.7.3-410.8.3-1ubuntu110.8.3-1ubuntu1+esm1
 None known
dogtag-pki
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
10.10.2-3build111.0.0-111.0.0-1ubuntu0.1~esm1
 None known

History

History
RecordedChangedSources
affected, facts
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-2393 is a medium vulnerability (CVSS 5.7) in [unknown] Pki-core, published July 14, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in idm-pki-acme 11.3.0-1.el9.

References

Show 30 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open