dogtag-pki vulnerabilities (Debian)
20 vulnerabilities.
-
dogtag-pkiDebian Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects 5.8 Medium -
dogtag-pkiDebian Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash 6.5 Medium -
dogtag-pkiDebian Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path 3.1 Low -
dogtag-pkiDebian Ca: token authentication bypass vulnerability 7.5 High -
dogtag-pkiDebian Access to external entities when parsing XML documents can lead to XML external entity (XXE)... 7.5 High -
dogtag-pkiDebian A flaw was found in pki-core, which could allow a user to get a certificate for another user... 5.7 Medium -
dogtag-pkiDebian A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores... 7.8 High -
dogtag-pkiDebian A flaw was found in pki-core. An attacker who has successfully compromised a key could use this... 8.1 High -
dogtag-pkiDebian A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a... 6.1 Medium -
dogtag-pkiDebian A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it... 6.1 Medium -
dogtag-pkiDebian In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests... 6.8 Medium -
dogtag-pkiDebian A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS... 2.4 Low -
dogtag-pkiDebian A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where... 4.6 Medium -
dogtag-pkiDebian A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA)... 4.3 Medium -
dogtag-pkiDebian A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where... 4.3 Medium -
dogtag-pkiDebian It was found that the Token Processing Service (TPS) did not properly sanitize the Token IDs from... 4.6 Medium -
dogtag-pkiDebian A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the... 4.7 Medium -
dogtag-pkiDebian It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally... 5.9 Medium -
dogtag-pkiDebian Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain... 7.5 High -
dogtag-pkiDebian Multiple temporary file creation vulnerabilities in pki-core 10.2.0. 7.5 High