Description
A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery request search page, enabling a Reflected Cross Site Scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| [UNKNOWN] | pki-core/pki-kra | all pki-core 10.x.x versions | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 11 | dogtag-pki | 10.9.1-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | dogtag-pki | No fix yet | — |
| Ubuntu Pro 18.04 LTS | dogtag-pki | No fix yet | — |
| Ubuntu Pro 16.04 LTS | dogtag-pki | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | apache-commons-collections | 3.2.2-10.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | apache-commons-lang | 2.6-21.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | apache-commons-net | 3.6-3.module+el8.3.0+6805+72837426 | RHSA-2020:4847 |
| RHEL 8 | bea-stax +1 | 1.2.0-16.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | glassfish-jaxb +3 | 2.2.11-11.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | jackson-core +2 | 2.10.0-1.module+el8.2.0+5059+3eb3af25 | RHSA-2020:4847 |
| RHEL 8 | jackson-jaxrs-providers +1 | 2.9.9-1.module+el8.1.0+3832+9784644d | RHSA-2020:4847 |
| RHEL 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | javassist +1 | 3.18.1-8.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | jss +1 | 4.7.3-1.module+el8.3.0+8058+d5cd4219 | RHSA-2020:4847 |
| RHEL 8 | ldapjdk +1 | 4.22.0-1.module+el8.3.0+6784+6e1e4c62 | RHSA-2020:4847 |
| RHEL 8 | pki-ca +8 | 10.9.4-1.module+el8.3.0+8058+d5cd4219 | RHSA-2020:4847 |
| RHEL 8 | pki-servlet-engine +1 | 1:9.0.30-1.module+el8.3.0+6730+8f9c6254 | RHSA-2020:4847 |
| RHEL 8 | python-nss +2 | 1.0.1-10.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | relaxngDatatype | 2011.1-7.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | resteasy | 3.0.26-3.module+el8.2.0+5723+4574fbff | RHSA-2020:4847 |
| RHEL 8 | slf4j +1 | 1.7.25-4.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | stax-ex | 1.7.7-8.module+el8.2.0+5723+4574fbff | RHSA-2020:4847 |
| RHEL 8 | tomcatjss | 7.5.0-1.module+el8.3.0+7355+c59bcbd9 | RHSA-2020:4847 |
| RHEL 8 | velocity | 1.7-24.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xalan-j2 | 2.7.1-38.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xerces-j2 | 2.11.0-34.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xml-commons-apis | 1.4.01-25.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xml-commons-resolver | 1.2-26.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xmlstreambuffer | 1.5.4-8.module+el8.2.0+5723+4574fbff | RHSA-2020:4847 |
| RHEL 8 | xsom | 0-19.20110809svn.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 7 | pki-ca +8 | 10.5.18-12.el7_9 | RHSA-2021:0851 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7.7 EUS | pki-ca +8 | 10.5.16-7.el7_7 | RHSA-2021:0975 |
| RHEL 7.6 EUS | pki-ca +8 | 10.5.9-15.el7_6 | RHSA-2021:0819 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | apache-commons-collections | 3.2.2-10.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | apache-commons-lang | 2.6-21.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | apache-commons-net | 3.6-3.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | bea-stax | 1.2.0-16.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | glassfish-jaxb | 2.2.11-11.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | jackson-core +2 | 2.10.0-1.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | jackson-jaxrs-providers | 2.9.9-1.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | javassist | 3.18.1-8.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | ldapjdk | 4.22.0-1.module+el8.4.0+418+b7ae1d4a | RLSA-2020:4847 |
| Rocky Linux 8 | pki-servlet-engine | 1:9.0.30-1.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | python-nss | 1.0.1-10.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | relaxngDatatype | 2011.1-7.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | resteasy | 3.0.26-3.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | slf4j | 1.7.25-4.module+el8.3.0+74+855e3f5d | RLSA-2020:4847 |
| Rocky Linux 8 | stax-ex | 1.7.7-8.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | velocity | 1.7-24.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xalan-j2 | 2.7.1-38.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xerces-j2 | 2.11.0-34.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xml-commons-apis | 1.4.01-25.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xml-commons-resolver | 1.2-26.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xmlstreambuffer | 1.5.4-8.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xsom | 0-19.20110809svn.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | pki-ca +7 | 10.5.18-12.amzn2.0.1 | ALAS2-2021-1630 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | apache-commons-collections | 3.2.2-10.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | apache-commons-lang | 2.6-21.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | apache-commons-net | 3.6-3.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | bea-stax-api | 1.2.0-16.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | glassfish-jaxb-core +2 | 2.2.11-11.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | jackson-core +2 | 2.10.0-1.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | jackson-jaxrs-providers +1 | 2.9.9-1.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | javassist +1 | 3.18.1-8.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | jss +1 | 4.7.3-1.module+el8.3.0+7857+983338ee | ELSA-2020-4847 |
| Oracle Linux 8 | ldapjdk +1 | 4.22.0-1.module+el8.3.0+7857+983338ee | ELSA-2020-4847 |
| Oracle Linux 8 | pki-ca +7 | 10.9.4-1.0.1.module+el8.3.0+7857+983338ee | ELSA-2020-4847 |
| Oracle Linux 8 | pki-servlet-engine +1 | 1:9.0.30-1.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | python3-nss +1 | 1.0.1-10.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | relaxngDatatype | 2011.1-7.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | resteasy | 3.0.26-3.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | slf4j +1 | 1.7.25-4.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | stax-ex | 1.7.7-8.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | tomcatjss | 7.5.0-1.module+el8.3.0+7857+983338ee | ELSA-2020-4847 |
| Oracle Linux 8 | velocity | 1.7-24.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xalan-j2 | 2.7.1-38.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xerces-j2 | 2.11.0-34.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xml-commons-apis | 1.4.01-25.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xml-commons-resolver | 1.2-26.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xmlstreambuffer | 1.5.4-8.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xsom | 0-19.20110809svn.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 7 | pki-ca +7 | 10.5.18-12.el7_9 | ELSA-2021-0851 |
Advisories 9
- RHSA-2021:0851 Red Hat Security Advisory: pki-core security and bug fix update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2020:4847 Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2021:0975 Red Hat Security Advisory: pki-core security update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RHSA-2021:0819 Red Hat Security Advisory: pki-core security update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- WID-SEC-2024-3648 Red Hat Enterprise Linux pki-core: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 8, 2026
- RLSA-2020:4847 Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
- ALAS2-2021-1630 Important: pki-core security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Apr 21, 2021
- ELSA-2021-0851 Important: pki-core security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Mar 17, 2021
- ELSA-2020-4847 Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 10, 2020