Lucene search
RedHatRHSA-2017:2335HistoryAug 01, 2017 - 3:28 a.m.
(RHSA-2017:2335) Moderate: pki-core security update
2017-08-0103:28:22
access.redhat.com
14
EPSS
0.002
Percentile
52.3%
Red Hat Certificate System is an enterprise software system designed to manage enterprise public key infrastructure (PKI) deployments. PKI Core contains fundamental packages required by Red Hat Certificate System, which comprise the Certificate Authority (CA) subsystem.
Security Fix(es):
- It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates. (CVE-2017-7537)
This issue was discovered by Christina Fu (Red Hat).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | aarch64 | pki-core-debuginfo | < 10.4.1-11.el7 | pki-core-debuginfo-10.4.1-11.el7.aarch64.rpm |
| RedHat | 7 | aarch64 | pki-symkey | < 10.4.1-11.el7 | pki-symkey-10.4.1-11.el7.aarch64.rpm |
| RedHat | 7 | noarch | pki-javadoc | < 10.4.1-11.el7 | pki-javadoc-10.4.1-11.el7.noarch.rpm |
| RedHat | 7 | s390x | pki-tools | < 10.4.1-11.el7 | pki-tools-10.4.1-11.el7.s390x.rpm |
| RedHat | 7 | noarch | pki-server | < 10.4.1-11.el7 | pki-server-10.4.1-11.el7.noarch.rpm |
| RedHat | 7 | ppc64 | pki-tools | < 10.4.1-11.el7 | pki-tools-10.4.1-11.el7.ppc64.rpm |
| RedHat | 7 | ppc64le | pki-symkey | < 10.4.1-11.el7 | pki-symkey-10.4.1-11.el7.ppc64le.rpm |
| RedHat | 7 | noarch | pki-kra | < 10.4.1-11.el7 | pki-kra-10.4.1-11.el7.noarch.rpm |
| RedHat | 7 | x86_64 | pki-core-debuginfo | < 10.4.1-11.el7 | pki-core-debuginfo-10.4.1-11.el7.x86_64.rpm |
| RedHat | 7 | x86_64 | pki-tools | < 10.4.1-11.el7 | pki-tools-10.4.1-11.el7.x86_64.rpm |
Related
nessus
nessus
Oracle Linux 7 : pki-core (ELSA-2017-2335)
2017-08-10 00:00:00
EulerOS 2.0 SP1 : pki-core (EulerOS-SA-2017-1183)
2017-09-08 00:00:00
RHEL 7 : pki-core (RHSA-2017:2335)
2017-08-02 00:00:00
redhatcve
redhatcve
CVE-2017-7537
2017-07-21 10:48:45
osv
osv
CVE-2017-7537
2018-07-26 13:29:00
nvd
nvd
CVE-2017-7537
2018-07-26 13:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for pki-core (EulerOS-SA-2017-1183)
2020-01-23 00:00:00
RedHat Update for pki-core RHSA-2017:2335-01
2017-08-04 00:00:00
Huawei EulerOS: Security Advisory for pki-core (EulerOS-SA-2017-1184)
2020-01-23 00:00:00
oraclelinux
oraclelinux
pki-core security update
2017-08-09 00:00:00
cvelist
cvelist
CVE-2017-7537
2018-07-26 13:00:00
prion
prion
Hardcoded credentials
2018-07-26 13:29:00
debiancve
debiancve
CVE-2017-7537
2018-07-26 13:29:00
veracode
veracode
Authentication Bypass
2019-01-15 09:18:04
ubuntucve
ubuntucve
CVE-2017-7537
2018-07-26 00:00:00
cve
cve
CVE-2017-7537
2018-07-26 13:29:00