Dogtag PKI vulnerabilities

1 vulnerability

Known vulnerabilities in Dogtag PKI products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
7.5CVE-2017-7537debiandogtag-pki+16
EPSS score
1.46%
It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.