1567 matches found
CVE-2024-6219
Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured...
CVE-2024-6219
Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured...
CVE-2024-6219
CVE-2024-6219 affects LXD when running in PKI mode prior to 5.21.1. A restricted client certificate can be added to the trust store and have its restrictions ignored, granting full access to the server. Root cause: PKI mode did not honor core.trust_ca_certificates during CA-signed authentication,...
CVE-2024-6156
Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store...
CVE-2024-6156
Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store...
CVE-2024-6156
The CVE-2024-6156 entry applies to LXD in PKI mode. Affected component: LXD’s PKI mode TLS listener (ClientAuth set to TLSRequestClientCert). Root cause: when a client certificate is present in the trust store, a TLS handshake can bypass PKI restrictions and authenticate a non-CA-signed client in...
CVE-2024-6156
Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store...
CVE-2024-6156
Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store...
CVE-2024-6156
Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store...
Exploit for SQL Injection in Microsoft
Microsoft Configuration Manager ConfigMgr / SCCM 2403 Unauth...
RHEL 8 : pki-deps:10.6 (RHSA-2024:8572)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8572 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: tomcat: Denial of Servic...
RHSA-2024:8572 Red Hat Security Advisory: pki-deps:10.6 security update
Bulletin has no description...
RHSA-2024:8567 Red Hat Security Advisory: pki-deps:10.6 security update
Bulletin has no description...
RHSA-2024:8543 Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security update
Bulletin has no description...
RHSA-2024:8528 Red Hat Security Advisory: pki-servlet-engine security update
Bulletin has no description...
RHSA-2024:8494 Red Hat Security Advisory: pki-servlet-engine security update
Bulletin has no description...
RHSA-2024:8497 Red Hat Security Advisory: pki-deps:10.6 security update
Bulletin has no description...
Important: Red Hat Security Advisory: pki-deps:10.6 security update
An update for the pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
Important: Red Hat Security Advisory: pki-deps:10.6 security update
An update for the pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
Important: Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security update
An update for the pki-core:10.6 and pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...