CVE-2025-66406 Improper Authorization Check for SSH Certificate Revocation

Step CA is an online certificate authority for secure, automated certificate management for DevOps. Prior to 0.29.0, there is an improper authorization check for SSH certificate revocation. This affects deployments configured with the SSHPOP provisioner. This vulnerability is fixed in 0.29.0...

CVE-2025-66406

CVE-2025-66406 affects Step CA (github.com/smallstep/certificates). Before version 0.29.0, there is an improper authorization check for SSH certificate revocation, impacting deployments configured with the SSHPOP provisioner. The root cause is inadequate authorization on revocation requests; the ...

CVE-2025-66406

Step CA is an online certificate authority for secure, automated certificate management for DevOps. Prior to 0.29.0, there is an improper authorization check for SSH certificate revocation. This affects deployments configured with the SSHPOP provisioner. This vulnerability is fixed in 0.29.0...

CVE-2025-66406 Improper Authorization Check for SSH Certificate Revocation

Step CA is an online certificate authority for secure, automated certificate management for DevOps. Prior to 0.29.0, there is an improper authorization check for SSH certificate revocation. This affects deployments configured with the SSHPOP provisioner. This vulnerability is fixed in 0.29.0...

GHSA-H8CP-697H-8C8P Step CA Has Authorization Bypass in ACME and SCEP Provisioners

Summary A security fix is now available for Step CA that resolves a vulnerability affecting deployments configured with ACME and/or SCEP provisioners. All operators running these provisioners should upgrade to the latest release v0.29.0 immediately. The issue was discovered and disclosed by a...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the deployments configured with ACME and SCEP provisioners. An attacker can gain unauthorized access to sensitive resources by bypassing authorization controls. Remediation Upgrade...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the deployments configured with ACME and SCEP provisioners. An attacker can gain unauthorized access to sensitive resources by bypassing authorization controls. Remediation Upgrade...

step-ca Has Improper Authorization Check for SSH Certificate Revocation

Summary An authorized attacker can bypass authorization checks and revoke any SSH certificate issued by Step CA by using a valid revocation token. Details Step CA users can obtain SSH certificates from a few provisioners. The SSHPOP provisioner allows revocation of the SSH certificate preventing...

PT-2025-48988

Name of the Vulnerable Software and Affected Versions Step CA versions prior to 0.29.0 Description Step CA is an online certificate authority for secure, automated certificate management for DevOps. A flaw exists in the authorization check for SSH certificate revocation, specifically impacting...

step-certificates -- Authorization Bypass in ACME and SCEP Provisioners

smallstep reports: An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: harbor-registry, kubernetes-event-exporter, rancher-loglevel, smokescreen, sbom-convert, terraform-provider-kubernetes, kafka-proxy, sriov-network-device-plugin, portieris, cargobump, certificate-transparency, cfssl, dgraph, chart-testing, frp,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, sigstore-scaffolding, regclient, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev, metacontroller, spark-operator...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: opensearch-k8s-operator, docker-machine-driver-harvester, kubernetes-csi-livenessprobe, regclient, sigstore-scaffolding, kubeflow-katib, harbor-registry, kubernetes-event-exporter, falcoctl, mongodb-kubernetes-operator, rancher-loglevel, vendir, octo-sts, dagdotdev,...