idm-pki-server vulnerabilities (Red Hat)
9 vulnerabilities.
-
idm-pki-serverRed Hat Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint 8.1 High -
idm-pki-serverRed Hat jackson-databind: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization allows CPU denial of service 7.5 High -
idm-pki-serverRed Hat Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) 7.2 High -
idm-pki-serverRed Hat jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation 8.1 High -
idm-pki-serverRed Hat jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) 8.1 High -
idm-pki-serverRed Hat Apache Tomcat: Denial of Service 8.6 High -
idm-pki-serverRed Hat Ca: token authentication bypass vulnerability 7.5 High -
idm-pki-serverRed Hat Access to external entities when parsing XML documents can lead to XML external entity (XXE)... 7.5 High -
idm-pki-serverRed Hat A flaw was found in pki-core, which could allow a user to get a certificate for another user... 5.7 Medium