Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2022-2610

Низкий

ALT-PU-2022-2610: package pki-core update to version 10.14.1-alt1

Источник
errata.altlinux.org
Дата публикации
14.09.2022
Дата обновления
14.09.2022
Устраненные уязвимости
1

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades pki-core to version 10.14.1-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 5.7
ubuntu
больше 4 лет назад

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

CVSS3: 7.6
redhat
больше 4 лет назад

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

CVSS3: 5.7
nvd
больше 4 лет назад

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

CVSS3: 5.7
debian
больше 4 лет назад

A flaw was found in pki-core, which could allow a user to get a certif ...

CVSS3: 5.7
github
больше 4 лет назад

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.