https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:59:03 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:2293 <p><strong>Affected:</strong> AlmaLinux:9: idm-pki-acme, AlmaLinux:9: idm-pki-base, AlmaLinux:9: idm-pki-ca, AlmaLinux:9: idm-pki-est, AlmaLinux:9: idm-pki-java, AlmaLinux:9: idm-pki-kra, AlmaLinux:9: idm-pki-server, AlmaLinux:9: idm-pki-tools, AlmaLinux:9: python3-idm-pki</p> <p>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.</p> <p>Security Fix(es):</p> <p>* pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field (CVE-2022-2393)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: idm-pki-acme, AlmaLinux:9: idm-pki-base, AlmaLinux:9: idm-pki-ca, AlmaLinux:9: idm-pki-est, AlmaLinux:9: idm-pki-java, AlmaLinux:9: idm-pki-kra, AlmaLinux:9: idm-pki-server, AlmaLinux:9: idm-pki-tools, AlmaLinux:9: python3-idm-pki</p> <p>The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.</p> <p>Security Fix(es):</p> <p>* pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field (CVE-2022-2393)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:2293 https://cve.radiocsirt.org/vuln/euvd-2026-12368 EUVD-2026-12368 https://cve.radiocsirt.org/vuln/euvd-2026-12368 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2393 <p>A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.</p> <p>A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2393 https://cve.radiocsirt.org/vuln/ghsa-hjh3-jq28-5qcc <p>A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.</p> <p>A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.</p> https://cve.radiocsirt.org/vuln/ghsa-hjh3-jq28-5qcc https://cve.radiocsirt.org/vuln/gsd-2022-2393 gsd-2022-2393 https://cve.radiocsirt.org/vuln/gsd-2022-2393 https://cve.radiocsirt.org/vuln/rhsa-2022:7077 <p>pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field</p> <p>pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field</p> https://cve.radiocsirt.org/vuln/rhsa-2022:7077 https://cve.radiocsirt.org/vuln/rhsa-2022:7086 <p>pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field</p> <p>pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field</p> https://cve.radiocsirt.org/vuln/rhsa-2022:7086 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2393 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki, Ubuntu:Pro:22.04:LTS: dogtag-pki</p> <p>A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dogtag-pki, Ubuntu:Pro:18.04:LTS: dogtag-pki, Ubuntu:Pro:20.04:LTS: dogtag-pki, Ubuntu:Pro:22.04:LTS: dogtag-pki</p> <p>A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2393 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0706 <p>Ein Angreifer aus dem angrenzenden Netzwerk kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer aus dem angrenzenden Netzwerk kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0706