A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.
{ "binaries": [ { "binary_name": "dogtag-pki", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "dogtag-pki-console-theme", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "dogtag-pki-server-theme", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "libsymkey-java", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "libsymkey-jni", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-base", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-ca", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-console", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-javadoc", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-kra", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-ocsp", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-server", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-tks", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-tools", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-tps", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-tps-client", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" } ] }
{ "binaries": [ { "binary_name": "dogtag-pki", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "dogtag-pki-console-theme", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "dogtag-pki-server-theme", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "libsymkey-java", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "libsymkey-jni", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-base", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-base-java", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-ca", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-console", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-javadoc", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-kra", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-ocsp", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-server", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-tks", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-tools", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-tps", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-tps-client", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "python3-pki-base", "binary_version": "10.6.0-1ubuntu2" } ] }
{ "binaries": [ { "binary_name": "dogtag-pki", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "dogtag-pki-console-theme", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "dogtag-pki-server-theme", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "libsymkey-java", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "libsymkey-jni", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-base", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-base-java", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-ca", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-console", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-javadoc", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-kra", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-ocsp", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-server", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-tks", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-tools", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-tps", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-tps-client", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "python3-pki-base", "binary_version": "10.8.3-1ubuntu1" } ] }
{ "binaries": [ { "binary_name": "dogtag-pki", "binary_version": "11.0.0-1" }, { "binary_name": "dogtag-pki-console-theme", "binary_version": "11.0.0-1" }, { "binary_name": "dogtag-pki-server-theme", "binary_version": "11.0.0-1" }, { "binary_name": "libsymkey-java", "binary_version": "11.0.0-1" }, { "binary_name": "libsymkey-jni", "binary_version": "11.0.0-1" }, { "binary_name": "pki-base", "binary_version": "11.0.0-1" }, { "binary_name": "pki-base-java", "binary_version": "11.0.0-1" }, { "binary_name": "pki-ca", "binary_version": "11.0.0-1" }, { "binary_name": "pki-console", "binary_version": "11.0.0-1" }, { "binary_name": "pki-javadoc", "binary_version": "11.0.0-1" }, { "binary_name": "pki-kra", "binary_version": "11.0.0-1" }, { "binary_name": "pki-ocsp", "binary_version": "11.0.0-1" }, { "binary_name": "pki-server", "binary_version": "11.0.0-1" }, { "binary_name": "pki-tks", "binary_version": "11.0.0-1" }, { "binary_name": "pki-tools", "binary_version": "11.0.0-1" }, { "binary_name": "pki-tps", "binary_version": "11.0.0-1" }, { "binary_name": "pki-tps-client", "binary_version": "11.0.0-1" }, { "binary_name": "python3-pki-base", "binary_version": "11.0.0-1" } ] }