Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3551

Опубликовано: 16 фев. 2022
Источник: nvd
CVSS3: 7.8
CVSS2: 4.4
EPSS Низкий

Описание

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:dogtagpki:dogtagpki:*:*:*:*:*:*:*:*
Версия от 10.10.0 (включая) до 10.10.6 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:oracle:linux:8:-:*:*:*:*:*:*
Конфигурация 4

Одно из

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*

EPSS

Процентиль: 3%
0.00018
Низкий

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-312
CWE-312

Связанные уязвимости

ubuntu логотип

CVE-2021-3551

CVSS3: 7.8
ubuntu
больше 3 лет назад

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.

redhat логотип

CVE-2021-3551

CVSS3: 7.8
redhat
около 4 лет назад

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.

debian логотип

CVE-2021-3551

CVSS3: 7.8
debian
больше 3 лет назад

A flaw was found in the PKI-server, where the spkispawn command, when ...

rocky логотип

RLSA-2021:2235

rocky
почти 4 года назад

Important: pki-core:10.6 security update

github логотип

GHSA-9ggg-37fj-xc96

github
больше 3 лет назад

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.

EPSS

Процентиль: 3%
0.00018
Низкий

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-312
CWE-312