All products

Red Hat Certificate System 9/pki-core

Red Hat · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny accessCVE-2018-1080 Red Hat Certificate System 9/pki-coreRed Hat Enterprise Linux 6/pki-core Red Hat Medium No fix reported
RHCS: Memory Leak During HTTPS Connection Leads to Denial of ServiceCVE-2026-12353 Red Hat Certificate System 9/pki-coreRed Hat Enterprise Linux 10/dogtag-pki Red Hat Medium No fix reported
pki-core: dogtag-pki: redhat-pki: pki-core: CA renewal request processing omits realm authorization check performed by enrollment pathCVE-2026-17039 Red Hat Certificate System 10/redhat-pkiRed Hat Certificate System 11/redhat-pki Red Hat Low No fix reported
dogtag-pki: pki-core: redhat-pki: pki: ACME admin enable/disable endpoint authentication bypass via trailing slashCVE-2026-18047 Red Hat Certificate System 10/redhat-pki:10/redhat-pkiRed Hat Certificate System 11/redhat-pki Red Hat Medium No fix reported
dogtag-pki: pki-core: redhat-pki: pki: ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirectsCVE-2026-18369 Red Hat Certificate System 10/redhat-pki:10/redhat-pkiRed Hat Certificate System 11/redhat-pki Red Hat Medium No fix reported
pki-core: dogtag-pki: Unauthenticated Dogtag CA REST API exposes Security Domain HostsCVE-2026-53682 Red Hat Certificate System 9/pki-coreRed Hat Enterprise Linux 10/dogtag-pki Red Hat Medium No fix reported
pki-core: dogtag-pki: empty request to Dogtag /ca/rest/certrequests causes HTTP 500, java exception, and stacktrace disclosureCVE-2026-11873 Red Hat Certificate System 9/pki-coreRed Hat Enterprise Linux 10/dogtag-pki Red Hat Medium No fix reported
pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content (ExternalProcessConstraint)CVE-2026-76561 Red Hat Certificate System 9/pki-coreRed Hat Enterprise Linux 6/pki-core Red Hat High No fix reported