Vulnerabilities > CVE-2019-10179

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

redhat

dogtagpki

NVD

Published: 2020-03-20

Updated: 2024-11-21

Summary

A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery request search page, enabling a Reflected Cross Site Scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.

Vulnerable Configurations

Part	Description	Count
OS	Redhat Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0	2
Application	Dogtagpki Dogtagpki Dogtagpki 10.0 Dogtagpki Dogtagpki 10.0.2 Dogtagpki Dogtagpki 10.0.3 Dogtagpki Dogtagpki 10.0.4 Dogtagpki Dogtagpki 10.0.5 Dogtagpki Dogtagpki 10.0.6 Dogtagpki Dogtagpki 10.0.7 Dogtagpki Dogtagpki 10.1.0 Dogtagpki Dogtagpki 10.1.1 Dogtagpki Dogtagpki 10.1.2 Dogtagpki Dogtagpki 10.2.0 Dogtagpki Dogtagpki 10.2.1 Dogtagpki Dogtagpki 10.2.2 Dogtagpki Dogtagpki 10.2.3 Dogtagpki Dogtagpki 10.2.4 Dogtagpki Dogtagpki 10.2.5 Dogtagpki Dogtagpki 10.2.6 Dogtagpki Dogtagpki 10.3.0 Dogtagpki Dogtagpki 10.3.1 Dogtagpki Dogtagpki 10.3.2 Dogtagpki Dogtagpki 10.3.3 Dogtagpki Dogtagpki 10.3.4 Dogtagpki Dogtagpki 10.3.5 Dogtagpki Dogtagpki 10.4.0 Dogtagpki Dogtagpki 10.4.1 Dogtagpki Dogtagpki 10.4.2 Dogtagpki Dogtagpki 10.4.3 Dogtagpki Dogtagpki 10.4.4 Dogtagpki Dogtagpki 10.4.5 Dogtagpki Dogtagpki 10.4.6 Dogtagpki Dogtagpki 10.4.7 Dogtagpki Dogtagpki 10.4.8 Dogtagpki Dogtagpki 10.5.0 Dogtagpki Dogtagpki 10.5.1 Dogtagpki Dogtagpki 10.5.2 Dogtagpki Dogtagpki 10.5.3 Dogtagpki Dogtagpki 10.5.4 Dogtagpki Dogtagpki 10.5.5 Dogtagpki Dogtagpki 10.5.6 Dogtagpki Dogtagpki 10.5.7 Dogtagpki Dogtagpki 10.5.8 Dogtagpki Dogtagpki 10.5.9 Dogtagpki Dogtagpki 10.5.10 Dogtagpki Dogtagpki 10.5.11 Dogtagpki Dogtagpki 10.5.12 Dogtagpki Dogtagpki 10.5.16 Dogtagpki Dogtagpki 10.5.17 Dogtagpki Dogtagpki 10.5.18 Dogtagpki Dogtagpki 10.6.0 Dogtagpki Dogtagpki 10.6.1 Dogtagpki Dogtagpki 10.6.2 Dogtagpki Dogtagpki 10.6.3 Dogtagpki Dogtagpki 10.6.4 Dogtagpki Dogtagpki 10.6.5 Dogtagpki Dogtagpki 10.6.6 Dogtagpki Dogtagpki 10.6.7 Dogtagpki Dogtagpki 10.6.8 Dogtagpki Dogtagpki 10.6.9 Dogtagpki Dogtagpki 10.6.10 Dogtagpki Dogtagpki 10.7.0 Dogtagpki Dogtagpki 10.7.1 Dogtagpki Dogtagpki 10.7.2 Dogtagpki Dogtagpki 10.7.3 Dogtagpki Dogtagpki 10.7.4 Dogtagpki Dogtagpki 10.8.0 Dogtagpki Dogtagpki 10.8.1 Dogtagpki Dogtagpki 10.8.2 Dogtagpki Dogtagpki 10.8.3	81

Vulnerabilities > CVE-2019-10179 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2019-10179"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2019-10179