{"id":"CVE-2021-20179","aliases":["DEBIAN-CVE-2021-20179","EUVD-2021-7635","GHSA-q87w-gh3f-77p7","RHSA-2021:0819","RHSA-2021:0851","RHSA-2021:0966","RHSA-2021:0975","RHSA-2021:1263","RLSA-2021:0966","UBUNTU-CVE-2021-20179","USN-8158-1"],"status":"published","title":"A flaw was found in pki-core. An attacker who has successfully compromised a key could use this...","description":"A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0122,"percentile":0.68893,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-863"],"published":"2021-03-15T12:01:25Z","modified":"2026-10-20T14:01:48Z","fixes":[{"ecosystem":"Debian:11","package":"dogtag-pki","fixed_in":["10.10.2-2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss","fixed_in":["0:4.7.3-1.module+el8.3.0+8058+d5cd4219"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-debuginfo","fixed_in":["0:4.7.3-1.module+el8.3.0+8058+d5cd4219"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-debugsource","fixed_in":["0:4.7.3-1.module+el8.3.0+8058+d5cd4219"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-javadoc","fixed_in":["0:4.7.3-1.module+el8.3.0+8058+d5cd4219"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ldapjdk","fixed_in":["0:4.22.0-1.module+el8.3.0+6784+6e1e4c62"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ldapjdk-javadoc","fixed_in":["0:4.22.0-1.module+el8.3.0+6784+6e1e4c62"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-base","fixed_in":["0:10.9.4-3.module+el8.3.0+10353+73f6df5b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-base-java","fixed_in":["0:10.9.4-3.module+el8.3.0+10353+73f6df5b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-ca","fixed_in":["0:10.9.4-3.module+el8.3.0+10353+73f6df5b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core","fixed_in":["0:10.9.4-3.module+el8.3.0+10353+73f6df5b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core-debuginfo","fixed_in":["0:10.9.4-3.module+el8.3.0+10353+73f6df5b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core-debugsource","fixed_in":["0:10.9.4-3.module+el8.3.0+10353+73f6df5b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-kra","fixed_in":["0:10.9.4-3.module+el8.3.0+10353+73f6df5b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-server","fixed_in":["0:10.9.4-3.module+el8.3.0+10353+73f6df5b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-symkey","fixed_in":["0:10.9.4-3.module+el8.3.0+10353+73f6df5b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-symkey-debuginfo","fixed_in":["0:10.9.4-3.module+el8.3.0+10353+73f6df5b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-tools","fixed_in":["0:10.9.4-3.module+el8.3.0+10353+73f6df5b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-tools-debuginfo","fixed_in":["0:10.9.4-3.module+el8.3.0+10353+73f6df5b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-pki","fixed_in":["0:10.9.4-3.module+el8.3.0+10353+73f6df5b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tomcatjss","fixed_in":["0:7.5.0-1.module+el8.3.0+7355+c59bcbd9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"ldapjdk","fixed_in":["0:4.22.0-1.module+el8.4.0+418+b7ae1d4a"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dogtag-pki","fixed_in":["10.6.0-1ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"dogtag-pki","fixed_in":["10.8.3-1ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:11","package":"dogtag-pki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.10.2-2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"pki-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"pki-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"pki-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"pki-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.9-15.el7_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"pki-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"pki-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pki-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pki-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pki-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pki-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pki-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"pki-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.18-12.el7_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.3-1.module+el8.3.0+8058+d5cd4219"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.3-1.module+el8.3.0+8058+d5cd4219"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.3-1.module+el8.3.0+8058+d5cd4219"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.3-1.module+el8.3.0+8058+d5cd4219"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ldapjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.22.0-1.module+el8.3.0+6784+6e1e4c62"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ldapjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.22.0-1.module+el8.3.0+6784+6e1e4c62"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.9.4-3.module+el8.3.0+10353+73f6df5b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.9.4-3.module+el8.3.0+10353+73f6df5b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.9.4-3.module+el8.3.0+10353+73f6df5b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.9.4-3.module+el8.3.0+10353+73f6df5b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.9.4-3.module+el8.3.0+10353+73f6df5b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.9.4-3.module+el8.3.0+10353+73f6df5b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.9.4-3.module+el8.3.0+10353+73f6df5b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.9.4-3.module+el8.3.0+10353+73f6df5b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.9.4-3.module+el8.3.0+10353+73f6df5b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-symkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.9.4-3.module+el8.3.0+10353+73f6df5b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.9.4-3.module+el8.3.0+10353+73f6df5b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.9.4-3.module+el8.3.0+10353+73f6df5b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-pki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.9.4-3.module+el8.3.0+10353+73f6df5b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tomcatjss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.0-1.module+el8.3.0+7355+c59bcbd9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"pki-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"pki-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"pki-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"pki-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5.16-7.el7_7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-12.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"jss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-12.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"jss-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-12.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"jss-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-12.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"ldapjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-2.module+el8.2.0+6294+b7db4606"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"ldapjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-2.module+el8.2.0+6294+b7db4606"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-6.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-6.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-6.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-6.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pki-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-6.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pki-core-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-6.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-6.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-6.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-6.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pki-symkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-6.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-6.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"pki-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-6.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"python3-pki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-6.module+el8.2.0+10554+cf83aa72"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"tomcatjss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.1-2.module+el8.2.0+6294+b7db4606"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ldapjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.22.0-1.module+el8.4.0+418+b7ae1d4a"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dogtag-pki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6.0-1ubuntu2+esm1"}]}],"versions":["10.3.5+12-4ubuntu1","10.3.5+12-5","10.5.3-3","10.5.3-4","10.5.5-1","10.6.0~beta2-3","10.6.0-1ubuntu1","10.6.0-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"dogtag-pki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.8.3-1ubuntu1+esm1"}]}],"versions":["10.7.3-4","10.8.3-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dogtag-pki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6.0-1ubuntu2+esm1"}]}],"versions":["10.3.5+12-4ubuntu1","10.3.5+12-5","10.5.3-3","10.5.3-4","10.5.5-1","10.6.0~beta2-3","10.6.0-1ubuntu1","10.6.0-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"dogtag-pki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.8.3-1ubuntu1+esm1"}]}],"versions":["10.7.3-4","10.8.3-1ubuntu1"]}],"products":[{"vendor":"[unknown]","product":"pki-core"},{"vendor":"dogtagpki","product":"dogtagpki"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redhat","product":"certificate_system"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1914379","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://github.com/dogtagpki/pki/pull/3478","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/dogtagpki/pki/pull/3477","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/dogtagpki/pki/pull/3476","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/dogtagpki/pki/pull/3475","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/dogtagpki/pki/pull/3474","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3I7BRAHLE2WWSY76W3CKFCF5WSSAE24/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRE44N6P24AEDKRMWK7RPRLMCUUBRJII/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDOLFOLEIV7I4EUC3SCZBXL6E2ER7ZEN/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20179","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDOLFOLEIV7I4EUC3SCZBXL6E2ER7ZEN"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRE44N6P24AEDKRMWK7RPRLMCUUBRJII"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3I7BRAHLE2WWSY76W3CKFCF5WSSAE24"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDOLFOLEIV7I4EUC3SCZBXL6E2ER7ZEN"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HRE44N6P24AEDKRMWK7RPRLMCUUBRJII"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3I7BRAHLE2WWSY76W3CKFCF5WSSAE24"},{"url":"https://github.com/advisories/GHSA-q87w-gh3f-77p7"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-20179","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0819","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1710171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1891016","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0819.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10146","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10146","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10146","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10179","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10179","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10179","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10221","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10221","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-1721","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-1721","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1721","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25715","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25715","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25715","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20179","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20179","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0851","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883639","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0851.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11023","tags":["advisory"]},{"url":"https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0966","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1933146","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0966.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0975","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0975.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1263","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1933147","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1263.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:0966","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-20179","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8158-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-20179","description":"A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-03-15T12:01:25Z","modified":"2024-08-03T17:30:07.814Z","cwes":["CWE-863"],"updated_at":"2026-11-02T14:32:55.564736Z"}],"euvd":[{"id":"EUVD-2021-7635","description":"A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-03-15T12:01:25Z","modified":"2024-08-03T17:30:07Z","updated_at":"2026-11-03T03:25:09.355483Z"}],"ghsa":[{"id":"GHSA-q87w-gh3f-77p7","title":"A flaw was found in pki-core. An attacker who has successfully compromised a key could use this...","description":"A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2022-05-24T17:44:33Z","modified":"2024-04-11T21:16:47Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:57:09.217628Z"}],"nvd":[{"id":"CVE-2021-20179","description":"A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-03-15T13:15:14.887Z","modified":"2026-06-17T03:33:25.547Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:06:50.805771Z"}],"osv":[{"id":"CVE-2021-20179","description":"A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-03-15T13:15:14.887Z","modified":"2026-10-20T14:01:48.304921315Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2021-20179","description":"A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-03-15T13:15:14.887Z","modified":"2026-08-27T23:04:07.142238197Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"RHSA-2021:0819","title":"Red Hat Security Advisory: pki-core security update","status":"published","published":"2024-09-16T05:05:40Z","modified":"2026-06-27T10:13:00Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0851","title":"Red Hat Security Advisory: pki-core security and bug fix update","status":"published","published":"2024-09-16T05:05:47Z","modified":"2026-10-08T10:02:19Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0966","title":"Red Hat Security Advisory: pki-core:10.6 security update","status":"published","published":"2024-09-16T05:05:54Z","modified":"2025-11-22T12:18:31Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0975","title":"Red Hat Security Advisory: pki-core security update","status":"published","published":"2024-09-16T05:06:01Z","modified":"2026-06-27T10:13:07Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1263","title":"Red Hat Security Advisory: pki-core:10.6 security and bug fix update","status":"published","published":"2024-09-16T05:06:10Z","modified":"2026-06-27T10:13:17Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RLSA-2021:0966","title":"Important: pki-core:10.6 security update","description":"The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.\n\nSecurity Fix(es):\n\n* pki-core: Unprivileged users can renew any certificate (CVE-2021-20179)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-03-23T10:29:41Z","modified":"2026-02-04T07:40:26.489497Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-20179","description":"A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-03-15T13:15:00Z","modified":"2026-04-16T09:47:25.982318Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"USN-8158-1","title":"dogtag-pki vulnerability","description":"Fraser Tweedale and Geetika Kapoor discovered that Dogtag PKI could renew a\ncertificate without proper authentication. An attacker could possibly use\nthis to repeatedly renew a compromised certificate and maintain\nunauthorized access to a system or resource.","status":"published","published":"2026-04-08T19:25:33Z","modified":"2026-04-16T09:59:18.597041482Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}