PT-2021-13828 · Pki-Core+5 · Pki-Core+5

Alexander Scheel + 1 · Published 2021-03-15 · Updated 2026-04-08 · CVE-2021-20179

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: pki-core (affected versions not specified)

Description: A flaw was found in pki-core, allowing an attacker who has successfully compromised a key to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CESA-2021_0851

CESA-2021_0966

CVE-2021-20179

RHSA-2021:0819

RHSA-2021:0851

RHSA-2021:0966

RHSA-2021:0975

RHSA-2021:1263

RHSA-2021_0851

RHSA-2021_0966

RLSA-2021:0966

USN-8158-1

Affected Products

Centos

Linuxmint

Red Hat

Rocky Linux

Ubuntu

Pki-Core

References · 24

• https://github.com/dogtagpki/pki/pull/3477 · Patch
• https://github.com/dogtagpki/pki/pull/3475 · Patch
• https://github.com/dogtagpki/pki/pull/3474 · Patch
• https://github.com/dogtagpki/pki/pull/3478 · Patch
• https://github.com/dogtagpki/pki/pull/3476 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-20179 · Security Note
• https://osv.dev/vulnerability/RLSA-2021:0966 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2021:0966 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDOLFOLEIV7I4EUC3SCZBXL6E2ER7ZEN · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-20179 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-20179 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1914379 · Patch
• https://osv.dev/vulnerability/USN-8158-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-0851.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRE44N6P24AEDKRMWK7RPRLMCUUBRJII · Vendor Advisory