Advisories · Technology
Red Hat Certificate System 9.
Every CVE that names Red Hat Certificate System 9 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentication bypass allows certificate mis-issuance with arbitrary subject
- Red Hat Certificate System 10
- Red Hat Certificate System 11
- Authentication bypass
- CVSS 8.1 High
Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Broken access control
- CVSS 7.2 High
Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Command injection
- CVSS 5.3 Medium
Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts
- Red Hat Certificate System 9
- Red Hat Enterprise Linux 10
- Information disclosure
- Broken access control
- CVSS 6.5 Medium
Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure
- Red Hat Certificate System 9
- Red Hat Enterprise Linux 10
- Information disclosure
- CVSS 5.8 Medium
Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects
- Red Hat Certificate System 10.4 EUS for RHEL-8
- Red Hat Certificate System 10
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Dogtag-pki: pki-core: redhat-pki: pki: acme admin enable/disable endpoint authentication bypass via trailing slash
- Red Hat Certificate System 10
- Red Hat Certificate System 11
- Authentication bypass
- CVSS 3.1 Low
Pki-core: dogtag-pki: redhat-pki: pki-core: ca renewal request processing omits realm authorization check performed by enrollment path
- Red Hat Certificate System 10
- Red Hat Certificate System 11
- Broken access control
- CVSS 5.3 Medium
Rhcs: memory leak during https connection leads to denial of service
- Red Hat Certificate System 9
- Red Hat Enterprise Linux 10
- Denial of service