2 matches found
CVE-2026-104988
A flaw was found in Dogtag PKI pki-core. The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth without an end-user TLS client certificate. The SSLCLIENTCERT session attribute retains the EST subsystem's agent certificate, which causes...
8.1CVSS0.00204EPSS
SaveExploits0References2
CVE-2026-104988: Authentication Bypass by Spoofing
A flaw was found in Dogtag PKI pki-core. The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth without an end-user TLS client certificate. The SSLCLIENTCERT session attribute retains the EST subsystem's agent certificate, which causes...
8.1CVSS5.9AI score0.00204EPSS
SaveExploits0References2
20