cbcvebase.

Dogtag Jss vulnerabilities

1 known vulnerability affecting dogtag/jss.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2019-14823P3HIGHCVSS 7.4vaffects >= 4.4.6vaffects >= 4.5.3+1 more2019-10-14
CVE-2019-14823 [HIGH] CWE-358 CVE-2019-14823: A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions a A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to attacks such as Man in the Middle.
nvdosv
Dogtag Jss vulnerabilities | cvebase