idm-pki-java vulnerabilities (Red Hat)
7 vulnerabilities.
-
idm-pki-javaRed Hat Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint 8.1 High -
idm-pki-javaRed Hat jackson-databind: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization allows CPU denial of service 7.5 High -
idm-pki-javaRed Hat Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) 7.2 High -
idm-pki-javaRed Hat jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation 8.1 High -
idm-pki-javaRed Hat jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) 8.1 High -
idm-pki-javaRed Hat Ca: token authentication bypass vulnerability 7.5 High -
idm-pki-javaRed Hat A flaw was found in pki-core, which could allow a user to get a certificate for another user... 5.7 Medium