Все бюллетени/c9f2/ALT-PU-2021-2860-1
ALT-PU-2021-2860-1

Обновление пакета pki-core в ветке c9f2

Версия10.10.6-alt1.c9f2.1
Задание#282600
Опубликовано2021-09-23
Макс. серьёзностьHIGH
Серьёзность:

Закрытые проблемы (1)

CVE-2021-3551
HIGH7.8

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.

Опубликовано: 2022-02-16Изменено: 2024-11-21
CVSS 2.0СРЕДНЯЯ 4.4
CVSS:2.0/AV:L/AC:M/Au:N/C:P/I:P/A:P
CVSS 3.xВЫСОКАЯ 7.8
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H