idm-pki-java vulnerabilities (AlmaLinux)
10 vulnerabilities.
-
idm-pki-javaAlmaLinux jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoS 7.5 High -
idm-pki-javaAlmaLinux Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint 8.1 High -
idm-pki-javaAlmaLinux Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config 7.4 High -
idm-pki-javaAlmaLinux Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) 7.5 High -
idm-pki-javaAlmaLinux jackson-databind: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization allows CPU denial of service 7.5 High -
idm-pki-javaAlmaLinux Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) 7.2 High -
idm-pki-javaAlmaLinux jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation 8.1 High -
idm-pki-javaAlmaLinux jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) 8.1 High -
idm-pki-javaAlmaLinux Ca: token authentication bypass vulnerability 7.5 High -
idm-pki-javaAlmaLinux A flaw was found in pki-core, which could allow a user to get a certificate for another user... 5.7 Medium