Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hjh3-jq28-5qcc

Опубликовано: 15 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

EPSS

Процентиль: 17%
0.00054
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-285
CWE-287

Связанные уязвимости

CVSS3: 5.7
ubuntu
около 3 лет назад

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

CVSS3: 7.6
redhat
около 3 лет назад

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

CVSS3: 5.7
nvd
около 3 лет назад

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

CVSS3: 5.7
debian
около 3 лет назад

A flaw was found in pki-core, which could allow a user to get a certif ...

oracle-oval
больше 2 лет назад

ELSA-2023-2293: pki-core security, bug fix, and enhancement update (MODERATE)

EPSS

Процентиль: 17%
0.00054
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-285
CWE-287