Moderate: Red Hat Security Advisory: pki-core and redhat-pki-theme security and bug fix update

An update for pki-core and redhat-pki-theme is now available for Red Hat Certificate System 9.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2020-1696

CVE-2020-1696 affects all pki-core 10.x.x versions where the Token Processing Service (TPS) fails to sanitize Profile IDs, enabling Stored XSS when the profile ID is printed. The issue is described as Stored XSS in TPS profile creation/Activity tab across Red Hat advisory references, with an atta...