RHSA-2024:4070

csafUSredhat_csaf

Red Hat Security Advisory: Red Hat Certificate System 10.4 for RHEL 8 security and bug fix update

view advisory published 2024-06-24

An update for pki-core is now available for Red Hat Certificate System 10.4 for RHEL 8.6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link in the References section.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-4727US——
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker c…
02

references

External citations — patches, advisories, analysis.

03

remediations (36)

  • Fixedidm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedidm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.src (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedjss-0:4.9.10-1.module+el8pki+21949+4b2d0700.src (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedjss-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedjss-debuginfo-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedjss-debugsource-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedjss-javadoc-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.src (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedldapjdk-javadoc-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedpython3-redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.src (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-acme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-base-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-base-java-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-ca-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-console-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-console-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-debugsource-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-est-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-javadoc-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-kra-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-ocsp-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-server-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-server-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-symkey-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-symkey-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-tks-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-tools-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-tools-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-tps-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedredhat-pki-tps-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedtomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.noarch (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
  • Fixedtomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.src (redhat-pki:10) as a component of Red Hat Certificate System 10.4 EUS for RHEL 8

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4070
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan