Advisories · Technology
Red Hat Certificate System 10.
Every CVE that names Red Hat Certificate System 10 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject
- Red Hat Certificate System 10
- Red Hat Certificate System 11
- Authentication bypass
- CVSS 7.4 High
Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config
- Red Hat
- Red Hat Build of Apache Camel 3.33.4.redhat
- CWE-346
- CWE-942
- CVSS 7.5 High
Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)
- Red Hat
- Red Hat Build of Apache Camel 3.33.4.redhat
- CWE-409
- CVSS 6.5 Medium
Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates
- Red Hat Certificate System 10
- Red Hat Certificate System 11
- Weak cryptography or TLS
- CVSS 5.8 Medium
Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects
- Red Hat Certificate System 10.4 EUS for RHEL-8
- Red Hat Certificate System 10
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash
- Red Hat Certificate System 10
- Red Hat Certificate System 11
- Authentication bypass
- CVSS 3.1 Low
Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path
- Red Hat Certificate System 10
- Red Hat Certificate System 11
- Broken access control