CVE-2019-10180: XSS

Q: What is CVE-2019-10180?

CVE-2019-10180 is a vulnerability found in all pki-core 10.x.x versions, involving the Token Processing Service (TPS) and a Stored Cross Site Scripting (XSS) vulnerability.

Q: What is the severity of CVE-2019-10180?

CVE-2019-10180 has a severity rating of medium (4.8).

Q: How does CVE-2019-10180 impact Dogtagpki Dogtagpki?

CVE-2019-10180 affects Dogtagpki Dogtagpki versions 10.0 to 10.8.3.

Q: How does CVE-2019-10180 impact Redhat Certificate System?

CVE-2019-10180 affects Redhat Certificate System version 10.0.

Q: How can I fix CVE-2019-10180?

To fix CVE-2019-10180, users should update to a patched version of pki-core that addresses the vulnerability.

Published Mar 31, 2020

Updated

A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly resulting in a Stored Cross Site Scripting (XSS) vulnerability. An attacker able to modify the parameters of any token could use this flaw to trick an authenticated user into executing arbitrary JavaScript code.

Affected Software

2 affected components

dogtagpki dogtagpki>=10.0<=10.8.3

redhat Certificate System=10.0

Event History

Mar 31, 2020

CVE Published

via MITRE·04:31 PM

Data Sourced

via MITRE·04:31 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2019-10180?

CVE-2019-10180 is a vulnerability found in all pki-core 10.x.x versions, involving the Token Processing Service (TPS) and a Stored Cross Site Scripting (XSS) vulnerability.

What is the severity of CVE-2019-10180?

CVE-2019-10180 has a severity rating of medium (4.8).

How does CVE-2019-10180 impact Dogtagpki Dogtagpki?

CVE-2019-10180 affects Dogtagpki Dogtagpki versions 10.0 to 10.8.3.

How does CVE-2019-10180 impact Redhat Certificate System?

CVE-2019-10180 affects Redhat Certificate System version 10.0.

How can I fix CVE-2019-10180?