A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"introduced": "33"
},
{
"last_affected": "33"
},
{
"introduced": "34"
},
{
"last_affected": "34"
}
],
"source": "CPE_STRING"
},
{
"cpes": [
"cpe:2.3:o:oracle:linux:8:-:*:*:*:*:*:*"
],
"vendor_product": "oracle:linux",
"extracted_events": [
{
"introduced": "8-NA"
},
{
"last_affected": "8-NA"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "redhat:enterprise_linux",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*"
],
"source": "CPE_STRING",
"extracted_events": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
]
},
{
"vendor_product": "redhat:enterprise_linux_eus",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.4"
},
{
"last_affected": "8.4"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "redhat:enterprise_linux_for_ibm_z_systems",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_for_ibm_z_systems_eus",
"extracted_events": [
{
"introduced": "8.4"
},
{
"last_affected": "8.4"
}
],
"source": "CPE_STRING"
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_for_power_little_endian",
"extracted_events": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "redhat:enterprise_linux_for_power_little_endian_eus",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "8.4"
},
{
"last_affected": "8.4"
}
],
"source": "CPE_STRING"
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_aus",
"extracted_events": [
{
"introduced": "8.4"
},
{
"last_affected": "8.4"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "redhat:enterprise_linux_server_tus",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*"
],
"source": "CPE_STRING",
"extracted_events": [
{
"introduced": "8.4"
},
{
"last_affected": "8.4"
}
]
},
{
"vendor_product": "redhat:enterprise_linux_server_update_services_for_sap_solutions",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*"
],
"source": "CPE_STRING",
"extracted_events": [
{
"introduced": "8.4"
},
{
"last_affected": "8.4"
}
]
}
]
}