Debian Dogtag-Pki vulnerabilities

CVE-2018-1080 [HIGH] CVE-2018-1080: dogtag-pki - Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, ... Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and deny rules to be reversed. If a server is configured to process allow rules before deny rules (authz.evaluateOrder=allow,deny), then allow rules will deny access and deny rules will grant access. This may result in an

CVE-2021-20179 [HIGH] CVE-2021-20179: dogtag-pki - A flaw was found in pki-core. An attacker who has successfully compromised a key... A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity. Scope: local bullseye: resolved (fixed in 10.10.2-2)

CVE-2017-7537 [MEDIUM] CVE-2017-7537: dogtag-pki - It was found that a mock CMC authentication plugin with a hardcoded secret was a... It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates. Scope: local bullseye: resolved (fixed in 10.3.5+12-5)

CVE-2020-15720 [MEDIUM] CVE-2020-15720: dogtag-pki - In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable ... In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests certificate validation. Since the verify parameter was hard-coded in all request functions, it was not possible to override the setting. As a result, tools making use of this class, such as the pki-server command, may have been vulnerable to Person-in-the-Middle atta

CVE-2019-10221 [MEDIUM] CVE-2019-10221: dogtag-pki - A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x ... A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in

CVE-2020-1721 [MEDIUM] CVE-2020-1721: dogtag-pki - A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 1... A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a key recovery request, enabling a reflected cross-site scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code. Scope: local bullseye: resolved (fi

CVE-2019-10179 [MEDIUM] CVE-2019-10179: dogtag-pki - A vulnerability was found in all pki-core 10.x.x versions, where the Key Recover... A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery request search page, enabling a Reflected Cross Site Scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code. Scope: local bullseye: resolved (f

CVE-2019-10146 [MEDIUM] CVE-2019-10146: dogtag-pki - A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions ... A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially crafted value that will be executed on the victim's browser. Scope: local bullseye: resolved (fixed in 10.9.1-1)