Vulnerabilities > CVE-2019-10146

CVSS 4.7 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

high complexity

redhat

dogtagpki

NVD

Published: 2020-03-18

Updated: 2024-11-21

Summary

A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially crafted value that will be executed on the victim's browser.

Vulnerable Configurations

Part	Description	Count
OS	Redhat Redhat Enterprise Linux 7.0	1
Application	Dogtagpki Dogtagpki Dogtagpki 10.0 Dogtagpki Dogtagpki 10.0.2 Dogtagpki Dogtagpki 10.0.3 Dogtagpki Dogtagpki 10.0.4 Dogtagpki Dogtagpki 10.0.5 Dogtagpki Dogtagpki 10.0.6 Dogtagpki Dogtagpki 10.0.7 Dogtagpki Dogtagpki 10.1.0 Dogtagpki Dogtagpki 10.1.1 Dogtagpki Dogtagpki 10.1.2 Dogtagpki Dogtagpki 10.2.0 Dogtagpki Dogtagpki 10.2.1 Dogtagpki Dogtagpki 10.2.2 Dogtagpki Dogtagpki 10.2.3 Dogtagpki Dogtagpki 10.2.4 Dogtagpki Dogtagpki 10.2.5 Dogtagpki Dogtagpki 10.2.6 Dogtagpki Dogtagpki 10.3.0 Dogtagpki Dogtagpki 10.3.1 Dogtagpki Dogtagpki 10.3.2 Dogtagpki Dogtagpki 10.3.3 Dogtagpki Dogtagpki 10.3.4 Dogtagpki Dogtagpki 10.3.5 Dogtagpki Dogtagpki 10.4.0 Dogtagpki Dogtagpki 10.4.1 Dogtagpki Dogtagpki 10.4.2 Dogtagpki Dogtagpki 10.4.3 Dogtagpki Dogtagpki 10.4.4 Dogtagpki Dogtagpki 10.4.5 Dogtagpki Dogtagpki 10.4.6 Dogtagpki Dogtagpki 10.4.7 Dogtagpki Dogtagpki 10.4.8 Dogtagpki Dogtagpki 10.5.0 Dogtagpki Dogtagpki 10.5.1 Dogtagpki Dogtagpki 10.5.2 Dogtagpki Dogtagpki 10.5.3 Dogtagpki Dogtagpki 10.5.4 Dogtagpki Dogtagpki 10.5.5 Dogtagpki Dogtagpki 10.5.6 Dogtagpki Dogtagpki 10.5.7 Dogtagpki Dogtagpki 10.5.8 Dogtagpki Dogtagpki 10.5.9 Dogtagpki Dogtagpki 10.5.10 Dogtagpki Dogtagpki 10.5.11 Dogtagpki Dogtagpki 10.5.12 Dogtagpki Dogtagpki 10.5.16 Dogtagpki Dogtagpki 10.5.17 Dogtagpki Dogtagpki 10.5.18 Dogtagpki Dogtagpki 10.6.0 Dogtagpki Dogtagpki 10.6.1 Dogtagpki Dogtagpki 10.6.2 Dogtagpki Dogtagpki 10.6.3 Dogtagpki Dogtagpki 10.6.4 Dogtagpki Dogtagpki 10.6.5 Dogtagpki Dogtagpki 10.6.6 Dogtagpki Dogtagpki 10.6.7 Dogtagpki Dogtagpki 10.6.8 Dogtagpki Dogtagpki 10.6.9 Dogtagpki Dogtagpki 10.6.10 Dogtagpki Dogtagpki 10.7.0 Dogtagpki Dogtagpki 10.7.1 Dogtagpki Dogtagpki 10.7.2 Dogtagpki Dogtagpki 10.7.3	66

Vulnerabilities > CVE-2019-10146 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2019-10146"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2019-10146