3334 matches found
CLEANSTART-2026-YQ02722 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation
Security vulnerability affects the argo-cd package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...
EUVD-2026-108516
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name...
ROS-20261023-73-0162
The vulnerability in Tomcat10 is related to the lack of verification for certificate revocation. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...
Linux Distros Unpatched Vulnerability : CVE-2026-115221
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or...
ROS-20261023-73-0163
The vulnerability in Tomcat11 is related to the lack of verification for certificate revocation. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...
ROS-20261023-73-0161
The vulnerability in Tomcat is related to the lack of verification for certificate revocation. Exploiting this vulnerability allows a remote attacker to perform a “man-in-the-middle” attack...
CVE-2026-115221
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name...
DEBIAN-CVE-2026-115221
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name...
CVE-2026-115221
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name...
CVE-2026-115221
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name...
CVE-2026-115221
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name...
CVE-2026-115221
A flaw in FreeIPA involves an improper authorization check where ownership of digital certificates is verified solely by matching the host name to the certificate's subject Common Name (CN) . Because the system fails to confirm actual ownership within the directory service, an authenticated host ...
CVE-2026-115221 Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name...
CVE-2026-115221 Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name...
CVE-2026-115221
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name...
EUVD-2026-107547
Django REST framework: TokenProxy.delete reports success and revokes nothing...
CLEANSTART-2026-SF17865 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response
CVE-2026-75805 affects multiple packages. Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. See references for individual vulnerability details...
CLEANSTART-2026-DO02682 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation
Security vulnerability affects the etcd package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...
Red Hat Enterprise Linux authorization issue vulnerability
In Red Hat Enterprise Linux versions 10, 8, and 9, there is an authorization issue vulnerability related to FreeIPA. This vulnerability stems from improper authorization checks; it only verifies ownership by matching the certificate’s CN against the hostname, without confirming actual ownership...
