Lucene search
PRIOn knowledge basePRION:CVE-2018-1080HistoryJul 03, 2018 - 1:29 a.m.
Design/Logic Flaw
2018-07-0301:29:00
PRIOn knowledge base
www.prio-n.com
7
Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and deny rules to be reversed. If a server is configured to process allow rules before deny rules (authz.evaluateOrder=allow,deny), then allow rules will deny access and deny rules will grant access. This may result in an escalation of privileges or have other unintended consequences.
Related
nessus
nessus
Scientific Linux Security Update : pki-core on SL7.x x86_64 (20180626)
2018-06-27 00:00:00
RHEL 6 : pki-core (Unpatched Vulnerability)
2024-06-03 00:00:00
CentOS 7 : pki-core (CESA-2018:1979)
2018-07-05 00:00:00
cve
cve
CVE-2018-1080
2018-07-03 01:29:00
osv
osv
CVE-2018-1080
2018-07-03 01:29:00
centos
centos
pki security update
2018-07-03 18:53:41
openvas
openvas
CentOS Update for pki-base CESA-2018:1979 centos7
2018-07-04 00:00:00
redhatcve
redhatcve
CVE-2018-1080
2018-03-15 01:49:08
veracode
veracode
Privilege Escalation
2019-01-15 09:24:35
ubuntucve
ubuntucve
CVE-2018-1080
2018-07-03 00:00:00
altlinux
altlinux
redhat
redhat
cvelist
cvelist
CVE-2018-1080
2018-07-02 18:00:00
oraclelinux
oraclelinux
pki-core security, bug fix, and enhancement update
2018-06-27 00:00:00
debiancve
debiancve
CVE-2018-1080
2018-07-03 01:29:00
nvd
nvd
CVE-2018-1080
2018-07-03 01:29:00