tocsin

Debian/dogtag-pki: high 7.5

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to byp

Action: Upgrade dogtag-pki to 10.3.5+12-5 or later.

Affected

introducedfixedlast affected
010.3.5+12-5-

Fixed versions

10.3.5+12-5

Sources

published · modified · JSON