Red Hat Security Advisory: Red Hat Certificate System security and bug fix update
An update for pki-console, pki-core, and redhat-pki-theme is now available for Red Hat Certificate System 9.4 EUS. Red Hat Certificate System 9.4 EUS is a special channel for the delivery of Red Hat Certificate System updates. Downgrading the installed packages is not supported. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10180US | medium4.8 | — | ||
A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly resu… | ||||
| CVE-2020-1696US | medium5.4 | — | ||
A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (X… | ||||
| CVE-2019-10178US | medium6.1 | — | ||
It was found that the Token Processing Service (TPS) did not properly sanitize the Token IDs from the "Activity" page, enabling a Stored Cross Site Scripting (XSS) vulnerability. A… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2021:0948self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1719042external
- 1721137external
- 1780707external
- Canonical URLself
remediations (36)
- Fixedidm-console-framework-0:1.1.17-4.el7dsrv.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedidm-console-framework-0:1.1.17-4.el7dsrv.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedidm-console-framework-0:1.1.17-4.el7dsrv.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedidm-console-framework-0:1.1.17-4.el7dsrv.src as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedidm-console-framework-0:1.1.17-4.el7dsrv.src as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedidm-console-framework-0:1.1.17-4.el7dsrv.src as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-console-0:10.5.9-2.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-console-0:10.5.9-2.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-console-0:10.5.9-2.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-console-0:10.5.9-2.el7pki.src as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-console-0:10.5.9-2.el7pki.src as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-console-0:10.5.9-2.el7pki.src as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-core-0:10.5.9-15.el7pki.src as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-core-0:10.5.9-15.el7pki.src as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-core-0:10.5.9-15.el7pki.src as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-core-debuginfo-0:10.5.9-15.el7pki.x86_64 as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-core-debuginfo-0:10.5.9-15.el7pki.x86_64 as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-core-debuginfo-0:10.5.9-15.el7pki.x86_64 as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-ocsp-0:10.5.9-15.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-ocsp-0:10.5.9-15.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-ocsp-0:10.5.9-15.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-tks-0:10.5.9-15.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-tks-0:10.5.9-15.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-tks-0:10.5.9-15.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-tps-0:10.5.9-15.el7pki.x86_64 as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-tps-0:10.5.9-15.el7pki.x86_64 as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedpki-tps-0:10.5.9-15.el7pki.x86_64 as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedredhat-pki-console-theme-0:10.5.9-5.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedredhat-pki-console-theme-0:10.5.9-5.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedredhat-pki-console-theme-0:10.5.9-5.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedredhat-pki-server-theme-0:10.5.9-5.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedredhat-pki-server-theme-0:10.5.9-5.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedredhat-pki-server-theme-0:10.5.9-5.el7pki.noarch as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedredhat-pki-theme-0:10.5.9-5.el7pki.src as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedredhat-pki-theme-0:10.5.9-5.el7pki.src as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948 - Fixedredhat-pki-theme-0:10.5.9-5.el7pki.src as a component of Red Hat Certificate System 9.4 EUS for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:0948
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan