Vulnerabilities > CVE-2019-10180

CVSS 4.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

dogtagpki

redhat

NVD

Published: 2020-03-31

Updated: 2024-11-21

Summary

A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly resulting in a Stored Cross Site Scripting (XSS) vulnerability. An attacker able to modify the parameters of any token could use this flaw to trick an authenticated user into executing arbitrary JavaScript code.

Vulnerable Configurations

Part	Description	Count
Application	Dogtagpki Dogtagpki Dogtagpki 10.0 Dogtagpki Dogtagpki 10.0.2 Dogtagpki Dogtagpki 10.0.3 Dogtagpki Dogtagpki 10.0.4 Dogtagpki Dogtagpki 10.0.5 Dogtagpki Dogtagpki 10.0.6 Dogtagpki Dogtagpki 10.0.7 Dogtagpki Dogtagpki 10.1.0 Dogtagpki Dogtagpki 10.1.1 Dogtagpki Dogtagpki 10.1.2 Dogtagpki Dogtagpki 10.2.0 Dogtagpki Dogtagpki 10.2.1 Dogtagpki Dogtagpki 10.2.2 Dogtagpki Dogtagpki 10.2.3 Dogtagpki Dogtagpki 10.2.4 Dogtagpki Dogtagpki 10.2.5 Dogtagpki Dogtagpki 10.2.6 Dogtagpki Dogtagpki 10.3.0 Dogtagpki Dogtagpki 10.3.1 Dogtagpki Dogtagpki 10.3.2 Dogtagpki Dogtagpki 10.3.3 Dogtagpki Dogtagpki 10.3.4 Dogtagpki Dogtagpki 10.3.5 Dogtagpki Dogtagpki 10.4.0 Dogtagpki Dogtagpki 10.4.1 Dogtagpki Dogtagpki 10.4.2 Dogtagpki Dogtagpki 10.4.3 Dogtagpki Dogtagpki 10.4.4 Dogtagpki Dogtagpki 10.4.5 Dogtagpki Dogtagpki 10.4.6 Dogtagpki Dogtagpki 10.4.7 Dogtagpki Dogtagpki 10.4.8 Dogtagpki Dogtagpki 10.5.0 Dogtagpki Dogtagpki 10.5.1 Dogtagpki Dogtagpki 10.5.2 Dogtagpki Dogtagpki 10.5.3 Dogtagpki Dogtagpki 10.5.4 Dogtagpki Dogtagpki 10.5.5 Dogtagpki Dogtagpki 10.5.6 Dogtagpki Dogtagpki 10.5.7 Dogtagpki Dogtagpki 10.5.8 Dogtagpki Dogtagpki 10.5.9 Dogtagpki Dogtagpki 10.5.10 Dogtagpki Dogtagpki 10.5.11 Dogtagpki Dogtagpki 10.5.12 Dogtagpki Dogtagpki 10.5.16 Dogtagpki Dogtagpki 10.5.17 Dogtagpki Dogtagpki 10.5.18 Dogtagpki Dogtagpki 10.6.0 Dogtagpki Dogtagpki 10.6.1 Dogtagpki Dogtagpki 10.6.2 Dogtagpki Dogtagpki 10.6.3 Dogtagpki Dogtagpki 10.6.4 Dogtagpki Dogtagpki 10.6.5 Dogtagpki Dogtagpki 10.6.6 Dogtagpki Dogtagpki 10.6.7 Dogtagpki Dogtagpki 10.6.8 Dogtagpki Dogtagpki 10.6.9 Dogtagpki Dogtagpki 10.6.10 Dogtagpki Dogtagpki 10.7.0 Dogtagpki Dogtagpki 10.7.1 Dogtagpki Dogtagpki 10.7.2 Dogtagpki Dogtagpki 10.7.3 Dogtagpki Dogtagpki 10.7.4 Dogtagpki Dogtagpki 10.8.0 Dogtagpki Dogtagpki 10.8.1 Dogtagpki Dogtagpki 10.8.2 Dogtagpki Dogtagpki 10.8.3	81
Application	Redhat Redhat Certificate System 10.0	1

Vulnerabilities > CVE-2019-10180 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2019-10180"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2019-10180