Red Hat Security Advisory: Red Hat Certificate System 9.7 security update
An update is now available for Red Hat Certificate System 9.7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-2414US | high7.5 | Exploit | ||
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (13)
- Behobenpki-core-0:10.5.18-24.el7pki.src as a component of Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:8915 - Behobenpki-core-debuginfo-0:10.5.18-24.el7pki.x86_64 as a component of Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:8915 - Behobenpki-ocsp-0:10.5.18-24.el7pki.noarch as a component of Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:8915 - Behobenpki-tks-0:10.5.18-24.el7pki.noarch as a component of Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:8915 - Behobenpki-tps-0:10.5.18-24.el7pki.x86_64 as a component of Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2022:8915 - Workaroundpki-core-0:10.5.18-24.el7pki.src as a component of Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
There is no known mitigation for this issue, please update the affected package as soon as possible.
- Workaroundpki-core-debuginfo-0:10.5.18-24.el7pki.x86_64 as a component of Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
There is no known mitigation for this issue, please update the affected package as soon as possible.
- Workaroundpki-ocsp-0:10.5.18-24.el7pki.noarch as a component of Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
There is no known mitigation for this issue, please update the affected package as soon as possible.
- Workaroundpki-tks-0:10.5.18-24.el7pki.noarch as a component of Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
There is no known mitigation for this issue, please update the affected package as soon as possible.
- Workaroundpki-tps-0:10.5.18-24.el7pki.x86_64 as a component of Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
There is no known mitigation for this issue, please update the affected package as soon as possible.
- Workaroundredhat-pki-console-theme-0:10.5.18-16.el7pki.noarch as a component of Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
There is no known mitigation for this issue, please update the affected package as soon as possible.
- Workaroundredhat-pki-server-theme-0:10.5.18-16.el7pki.noarch as a component of Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
There is no known mitigation for this issue, please update the affected package as soon as possible.
- Workaroundredhat-pki-theme-0:10.5.18-16.el7pki.src as a component of Red Hat Certificate System 9.7 for Red Hat Enterprise Server 7
There is no known mitigation for this issue, please update the affected package as soon as possible.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan