idm-pki-server vulnerabilities (AlmaLinux)
11 vulnerabilities.
-
idm-pki-serverAlmaLinux jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoS 7.5 High -
idm-pki-serverAlmaLinux Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint 8.1 High -
idm-pki-serverAlmaLinux Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config 7.4 High -
idm-pki-serverAlmaLinux Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) 7.5 High -
idm-pki-serverAlmaLinux jackson-databind: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization allows CPU denial of service 7.5 High -
idm-pki-serverAlmaLinux Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) 7.2 High -
idm-pki-serverAlmaLinux jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation 8.1 High -
idm-pki-serverAlmaLinux jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) 8.1 High -
idm-pki-serverAlmaLinux Ca: token authentication bypass vulnerability 7.5 High -
idm-pki-serverAlmaLinux Access to external entities when parsing XML documents can lead to XML external entity (XXE)... 7.5 High -
idm-pki-serverAlmaLinux A flaw was found in pki-core, which could allow a user to get a certificate for another user... 5.7 Medium