CVEvulnerability

CVE-2021-20179

8.1 HIGH Published 2021-03-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-03-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
Weaknesses
CWE-863

Description

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

Affected configurations

• dogtagpki dogtagpki (< 10.5.0) • dogtagpki dogtagpki (>= 10.5.1 < 10.8.0) • dogtagpki dogtagpki (>= 10.8.1 < 10.9.0) • dogtagpki dogtagpki (>= 10.9.1 < 10.10.0) • dogtagpki dogtagpki (>= 10.10.1 < 10.11.0) • redhat certificate system 10.0 • redhat enterprise linux 7.0 • redhat enterprise linux 8.0 • fedoraproject fedora 32 • fedoraproject fedora 33 • fedoraproject fedora 34

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References