Advisory ROSA-SA-2023-2120

Software: pki-core 10.5.18
OS: rosa-server79

package_evr_string: pki-core-10.5.18-16

CVE-ID: CVE-2022-2414
BDU-ID: 2022-05089
CVE-Crit: HIGH
CVE-DESC: A vulnerability in the pki-core package of the Red Hat Enterprise Linux operating system is related to incorrectly restricting XML references to external objects. Exploitation of the vulnerability could allow an attacker acting remotely to conduct XXE attacks
CVE-STATUS: Resolved
CVE-REV: Run yum update command to close it