Summary
Fraser Tweedale and Geetika Kapoor discovered that Dogtag PKI could renew a
certificate without proper authentication. An attacker could possibly use
this to repeatedly renew a compromised certificate and maintain
unauthorized access to a system or resource.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | dogtag-pki | 10.6.0-1ubuntu2+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | dogtag-pki | 10.8.3-1ubuntu1+esm1 |
Vulnerabilities 1
-
Unscored —
A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corre…
References
-
report
https://ubuntu.com/security/CVE-2021-20179