Dogtag PKI Pki Core vulnerabilities

1 vulnerability

Known vulnerabilities in Dogtag PKI Pki Core, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2017-7537debiandogtag-pki+16
EPSS score
1.46%
It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.