Red Hat Enterprise Linux pki-core: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 6

• Medium 4.7
  CVE-2019-10146

  A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to …

  Red Hat pki-core dogtag-pki dogtag-pki Debian Ubuntu
  Mar 18, 2020
• Medium 4.3
  CVE-2019-10179

  A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not…

  [UNKNOWN] pki-core/pki-kra dogtag-pki dogtag-pki Debian Ubuntu
  Mar 20, 2020
• Medium 4.3
  CVE-2019-10221

  A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from …

  [UNKNOWN] pki-core dogtag-pki dogtag-pki Debian Ubuntu
  Mar 20, 2020
• Unscored —
  CVE-2020-1721

  A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly saniti…

  dogtag-pki dogtag-pki Debian Ubuntu
  Apr 30, 2021
• Unscored —
  CVE-2020-25715

  A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scr…

  dogtag-pki dogtag-pki Debian Ubuntu
  May 28, 2021
• Unscored —
  CVE-2021-20179

  A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corre…

  dogtag-pki dogtag-pki Debian Ubuntu
  Mar 15, 2021

Revision history

1. 2026-04-08 #10

   Neue Updates von Ubuntu aufgenommen

2. 2024-12-09 #9

   Neue Updates von Ubuntu aufgenommen

3. 2021-04-21 #8

   Neue Updates von Amazon aufgenommen

4. 2021-04-19 #7

   Neue Updates von Red Hat aufgenommen

5. 2021-03-23 #6

   Neue Updates von Red Hat und Oracle Linux aufgenommen

6. 2021-03-22 #5

   Neue Updates von Red Hat aufgenommen

7. 2021-03-18 #4

   Neue Updates von CentOS aufgenommen

8. 2021-03-17 #3

   Neue Updates von Oracle Linux aufgenommen

9. 2021-03-16 #2

   Neue Updates von Red Hat aufgenommen

10. 2021-03-15 #1

    Initiale Fassung

References

• Red Hat Security Advisories vom 2021-03-15
  https://access.redhat.com/errata/RHSA-2021:0819
• Red Hat Security Advisory RHSA-2021:0851 vom 2021-03-16
  https://access.redhat.com/errata/RHSA-2021:0851
• Oracle Linux Security Advisory ELSA-2021-0851 vom 2021-03-18
  http://linux.oracle.com/errata/ELSA-2021-0851.html
• CentOS Security Advisory CESA-2021:0851 vom 2021-03-19
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2021-0851-Important-CentOS-7-pki-core-Security-Update-tp4646156.html
• Red Hat Security Advisory RHSA-2021:0966 vom 2021-03-23
  https://access.redhat.com/errata/RHSA-2021:0966
• Red Hat Security Advisory RHSA-2021:0975 vom 2021-03-23
  https://access.redhat.com/errata/RHSA-2021:0975
• Oracle Linux Security Advisory ELSA-2021-0966 vom 2021-03-24
  https://linux.oracle.com/errata/ELSA-2021-0966.html
• Red Hat Security Advisory RHSA-2021:1263 vom 2021-04-20
  https://access.redhat.com/errata/RHSA-2021:1263
• Amazon Linux Security Advisory ALAS-2021-1630 vom 2021-04-22
  https://alas.aws.amazon.com/AL2/ALAS-2021-1630.html
• Ubuntu Security Notice USN-7146-1 vom 2024-12-10
  https://ubuntu.com/security/notices/USN-7146-1
• Ubuntu Security Notice USN-8158-1 vom 2026-04-08
  https://ubuntu.com/security/notices/USN-8158-1