Vulnerabilities > CVE-2020-1696

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

redhat

dogtagpki

NVD

Published: 2020-03-20

Updated: 2024-11-21

Summary

A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.

Vulnerable Configurations

Part	Description	Count
Application	Redhat Redhat Certificate System 9.0 Redhat Certificate System 10.0	2
Application	Dogtagpki Dogtagpki Dogtagpki 10.0 Dogtagpki Dogtagpki 10.0.2 Dogtagpki Dogtagpki 10.0.3 Dogtagpki Dogtagpki 10.0.4 Dogtagpki Dogtagpki 10.0.5 Dogtagpki Dogtagpki 10.0.6 Dogtagpki Dogtagpki 10.0.7 Dogtagpki Dogtagpki 10.1.0 Dogtagpki Dogtagpki 10.1.1 Dogtagpki Dogtagpki 10.1.2 Dogtagpki Dogtagpki 10.2.0 Dogtagpki Dogtagpki 10.2.1 Dogtagpki Dogtagpki 10.2.2 Dogtagpki Dogtagpki 10.2.3 Dogtagpki Dogtagpki 10.2.4 Dogtagpki Dogtagpki 10.2.5 Dogtagpki Dogtagpki 10.2.6 Dogtagpki Dogtagpki 10.3.0 Dogtagpki Dogtagpki 10.3.1 Dogtagpki Dogtagpki 10.3.2 Dogtagpki Dogtagpki 10.3.3 Dogtagpki Dogtagpki 10.3.4 Dogtagpki Dogtagpki 10.3.5 Dogtagpki Dogtagpki 10.4.0 Dogtagpki Dogtagpki 10.4.1 Dogtagpki Dogtagpki 10.4.2 Dogtagpki Dogtagpki 10.4.3 Dogtagpki Dogtagpki 10.4.4 Dogtagpki Dogtagpki 10.4.5 Dogtagpki Dogtagpki 10.4.6 Dogtagpki Dogtagpki 10.4.7 Dogtagpki Dogtagpki 10.4.8 Dogtagpki Dogtagpki 10.5.0 Dogtagpki Dogtagpki 10.5.1 Dogtagpki Dogtagpki 10.5.2 Dogtagpki Dogtagpki 10.5.3 Dogtagpki Dogtagpki 10.5.4 Dogtagpki Dogtagpki 10.5.5 Dogtagpki Dogtagpki 10.5.6 Dogtagpki Dogtagpki 10.5.7 Dogtagpki Dogtagpki 10.5.8 Dogtagpki Dogtagpki 10.5.9 Dogtagpki Dogtagpki 10.5.10 Dogtagpki Dogtagpki 10.5.11 Dogtagpki Dogtagpki 10.5.12 Dogtagpki Dogtagpki 10.5.16 Dogtagpki Dogtagpki 10.5.17 Dogtagpki Dogtagpki 10.5.18 Dogtagpki Dogtagpki 10.6.0 Dogtagpki Dogtagpki 10.6.1 Dogtagpki Dogtagpki 10.6.2 Dogtagpki Dogtagpki 10.6.3 Dogtagpki Dogtagpki 10.6.4 Dogtagpki Dogtagpki 10.6.5 Dogtagpki Dogtagpki 10.6.6 Dogtagpki Dogtagpki 10.6.7 Dogtagpki Dogtagpki 10.6.8 Dogtagpki Dogtagpki 10.6.9 Dogtagpki Dogtagpki 10.6.10 Dogtagpki Dogtagpki 10.7.0 Dogtagpki Dogtagpki 10.7.1 Dogtagpki Dogtagpki 10.7.2 Dogtagpki Dogtagpki 10.7.3 Dogtagpki Dogtagpki 10.7.4 Dogtagpki Dogtagpki 10.8.0 Dogtagpki Dogtagpki 10.8.1 Dogtagpki Dogtagpki 10.8.2 Dogtagpki Dogtagpki 10.8.3	81

Vulnerabilities > CVE-2020-1696 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-1696"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-1696