RedHatRHSA-2022:7086(RHSA-2022:7086) Moderate: pki-core security update
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
EPSS
Percentile
12.6%
The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.
Security Fix(es):
- pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field (CVE-2022-2393)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| redhat | pki-core-0 | * | cpe:2.3:a:redhat:pki-core-0:*:*:*:*:*:*:*:* |
| redhat | pki-core | * | cpe:2.3:a:redhat:pki-core:*:*:*:*:*:*:*:* |
| redhat | enterprise_linux | 7 | cpe:2.3:o:redhat:enterprise_linux:7:*:*:*:*:*:*:* |
| redhat | enterprise_linux | 9 | cpe:2.3:o:redhat:enterprise_linux:9:*:*:*:*:*:*:* |
Related
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
EPSS
Percentile
12.6%