Scientific Linux Security Update : pki-core on SL7.x x86_64 (20180626)

Security Fixes : - pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access CVE-2018-1080 Bug Fixes : - Previously, when ECC keys were enrolled, Certificate Management over CMS CMC authentication failed with a 'TokenException: Unable to insert certificate...

Moderate: Red Hat Security Advisory: pki-core security, bug fix, and enhancement update

An update for pki-core is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

XenMobile: How to migrate the Cert Based Auth from existing CA to a new PKI-Infrastructure (With a new Root CA and Issuing CA)?

Existing working two-factor-authentication for XenMobile using cert based auth as the second factor are XenMobile-certificates that are issued by a Windows Enterprise Root CA. This Root CA will be decommissioned and replaced by a new Windows Enterprise Issuing CA that is signed by a new Root CA...

Microsoft Windows: User Account Control: Only elevate UIAccess applications that are installed in secure locations

This policy setting enforces the requirement that apps that request running with a UIAccess integrity level by means of a marking of UIAccess=true in their app manifest, must reside in a secure location on the file system. Relatively secure locations are limited to the following directories: -...

[SECURITY] Fedora 28 Update: ca-certificates-2018.2.24-1.0.fc28

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

[SECURITY] Fedora 27 Update: ca-certificates-2018.2.24-1.0.fc27

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

XenMobile Server - Netscaler Gateway Credential certificates (PKI) do not auto renew within the 60 days renewal time set

Question : XenMobile Server - Netscaler Gateway Credential certificates PKI do not auto renew within the 60 days renewal time set ? Answer : The NetScaler Gateway Credentials certificates are the user certificates which are directly bound from the Credential Provider to the NetScaler Gateway. Hen...

CVE-2018-1080

Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and deny rules to be reversed. If a server is configured to process allow rules before deny rules authz.evaluateOrder=allow,deny, then allow rules will...

Micro Focus NetIQ eDirectory PKI Plugin Design Vulnerability

Micro Focus NetIQ eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from Micro Focus, UK. The platform provides authentication policies, data backup and recovery services, data disaster recovery, etc. PKI...

CVE-2017-7429

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server...

Design/Logic Flaw

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server...

CVE-2017-7429 Fix for NetIQ shell code upload

The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code which could be used by authenticated attackers to execute JSP applets on the iManager server...

CVE-2017-7429

The CVE concerns NetIQ eDirectory PKI plugin prior to 8.8.8 Patch 10 Hotfix 1, where the certificate upload function can be abused to upload JSP code. This allows an authenticated attacker to execute JSP applets on the iManager server. Affected product: Micro Focus NetIQ eDirectory PKI plugin (ve...

[SECURITY] Fedora 26 Update: ca-certificates-2018.2.22-1.0.fc26

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

[SECURITY] Fedora 27 Update: ca-certificates-2018.2.22-1.0.fc27

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

[SECURITY] Fedora 27 Update: ca-certificates-2017.2.20-1.0.fc27

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

[SECURITY] Fedora 26 Update: ca-certificates-2017.2.20-1.0.fc26

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

[SECURITY] Fedora 25 Update: ca-certificates-2017.2.20-1.0.fc25

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet PKI...

CVE-2017-8213

Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 has an input validation vulnerability when handle TLS and DTLS handshake with certificate. Due to the...

pki-core input validation vulnerability

pki-core is a technology and specification that follows the standard of utilizing public key cryptography to provide a set of secure infrastructure platform for the conduct of e-commerce. An input validation vulnerability exists in pki-core version 10.2.0. A remote attacker could exploit this...