Lucene search
Redhat.comRH:CVE-2018-1080HistoryMar 15, 2018 - 1:49 a.m.
CVE-2018-1080
2018-03-1501:49:08
redhat.com
access.redhat.com
6
0.003 Low
EPSS
Percentile
71.0%
Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and deny rules to be reversed. If a server is configured to process allow rules before deny rules (authz.evaluateOrder=allow,deny), then allow rules will deny access and deny rules will grant access. This may result in an escalation of privileges or have other unintended consequences.
Related
centos
centos
pki security update
2018-07-03 18:53:41
nessus
nessus
CentOS 7 : pki-core (CESA-2018:1979)
2018-07-05 00:00:00
Oracle Linux 7 : pki-core (ELSA-2018-1979)
2018-06-28 00:00:00
Scientific Linux Security Update : pki-core on SL7.x x86_64 (20180626)
2018-06-27 00:00:00
openvas
openvas
CentOS Update for pki-base CESA-2018:1979 centos7
2018-07-04 00:00:00
veracode
veracode
Privilege Escalation
2019-01-15 09:24:35
redhat
redhat
cvelist
cvelist
CVE-2018-1080
2018-07-02 18:00:00
cve
cve
CVE-2018-1080
2018-07-03 01:29:00
osv
osv
CVE-2018-1080
2018-07-03 01:29:00
oraclelinux
oraclelinux
pki-core security, bug fix, and enhancement update
2018-06-27 00:00:00
debiancve
debiancve
CVE-2018-1080
2018-07-03 01:29:00
nvd
nvd
CVE-2018-1080
2018-07-03 01:29:00
ubuntucve
ubuntucve
CVE-2018-1080
2018-07-03 00:00:00
altlinux
altlinux
prion
prion
Design/Logic Flaw
2018-07-03 01:29:00