Vulnerabilities > CVE-2021-20179 - Incorrect Authorization vulnerability in multiple products

CVSS 8.1 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

NVD

Published: 2021-03-15

Updated: 2023-11-07

Summary

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

Vulnerable Configurations

Part	Description	Count
Application	Dogtagpki Dogtagpki Dogtagpki 10.5.1 Dogtagpki Dogtagpki 10.5.2 Dogtagpki Dogtagpki 10.5.3 Dogtagpki Dogtagpki 10.5.4 Dogtagpki Dogtagpki 10.5.5 Dogtagpki Dogtagpki 10.5.6 Dogtagpki Dogtagpki 10.5.7 Dogtagpki Dogtagpki 10.5.8 Dogtagpki Dogtagpki 10.5.9 Dogtagpki Dogtagpki 10.5.10 Dogtagpki Dogtagpki 10.5.11 Dogtagpki Dogtagpki 10.5.12 Dogtagpki Dogtagpki 10.5.16 Dogtagpki Dogtagpki 10.5.17 Dogtagpki Dogtagpki 10.5.18 Dogtagpki Dogtagpki 10.6.0 Dogtagpki Dogtagpki 10.6.1 Dogtagpki Dogtagpki 10.6.2 Dogtagpki Dogtagpki 10.6.3 Dogtagpki Dogtagpki 10.6.4 Dogtagpki Dogtagpki 10.6.5 Dogtagpki Dogtagpki 10.6.6 Dogtagpki Dogtagpki 10.6.7 Dogtagpki Dogtagpki 10.6.8 Dogtagpki Dogtagpki 10.6.9 Dogtagpki Dogtagpki 10.6.10 Dogtagpki Dogtagpki 10.7.0 Dogtagpki Dogtagpki 10.7.1 Dogtagpki Dogtagpki 10.7.2 Dogtagpki Dogtagpki 10.7.3 Dogtagpki Dogtagpki 10.7.4 Dogtagpki Dogtagpki 10.0 Dogtagpki Dogtagpki 10.0.2 Dogtagpki Dogtagpki 10.0.3 Dogtagpki Dogtagpki 10.0.4 Dogtagpki Dogtagpki 10.0.5 Dogtagpki Dogtagpki 10.0.6 Dogtagpki Dogtagpki 10.0.7 Dogtagpki Dogtagpki 10.1.0 Dogtagpki Dogtagpki 10.1.1 Dogtagpki Dogtagpki 10.1.2 Dogtagpki Dogtagpki 10.2.0 Dogtagpki Dogtagpki 10.2.1 Dogtagpki Dogtagpki 10.2.2 Dogtagpki Dogtagpki 10.2.3 Dogtagpki Dogtagpki 10.2.4 Dogtagpki Dogtagpki 10.2.5 Dogtagpki Dogtagpki 10.2.6 Dogtagpki Dogtagpki 10.3.0 Dogtagpki Dogtagpki 10.3.1 Dogtagpki Dogtagpki 10.3.2 Dogtagpki Dogtagpki 10.3.3 Dogtagpki Dogtagpki 10.3.4 Dogtagpki Dogtagpki 10.3.5 Dogtagpki Dogtagpki 10.4.0 Dogtagpki Dogtagpki 10.4.1 Dogtagpki Dogtagpki 10.4.2 Dogtagpki Dogtagpki 10.4.3 Dogtagpki Dogtagpki 10.4.4 Dogtagpki Dogtagpki 10.4.5 Dogtagpki Dogtagpki 10.4.6 Dogtagpki Dogtagpki 10.4.7 Dogtagpki Dogtagpki 10.4.8 Dogtagpki Dogtagpki 10.10.1 Dogtagpki Dogtagpki 10.10.2 Dogtagpki Dogtagpki 10.10.3 Dogtagpki Dogtagpki 10.10.4 Dogtagpki Dogtagpki 10.10.5 Dogtagpki Dogtagpki 10.10.6 Dogtagpki Dogtagpki 10.10.7 Dogtagpki Dogtagpki 10.9.1 Dogtagpki Dogtagpki 10.9.2 Dogtagpki Dogtagpki 10.9.4 Dogtagpki Dogtagpki 10.8.1 Dogtagpki Dogtagpki 10.8.2 Dogtagpki Dogtagpki 10.8.3	79
Application	Redhat Redhat Certificate System 10.0	1
OS	Redhat Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0	2
OS	Fedoraproject Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34	3

Common Weakness Enumeration (CWE)

CWE-863 - Incorrect Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References