RHSA-2022:7077: Moderate: Red Hat Certificate System 9.7 CVE bug fix update
The Public Key Infrastructure (PKI) Core contains fundamental packages<br>required by Red Hat Certificate System.<br>Security Fix(es):<br><li> CVE-2022-2393 pki-core: When using the caServerKeygenDirUserCert profile, user can get certificates for other UIDs by entering name in Subject field [rhcs9.7] [BZ #2111493]</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:7077?
The severity of RHSA-2022:7077 is considered critical due to the potential for unauthorized certificate issuance.
How do I fix RHSA-2022:7077?
To fix RHSA-2022:7077, upgrade the affected packages to the versions specified in the advisory.
Which systems are affected by RHSA-2022:7077?
RHSA-2022:7077 affects systems using the pki-core and related packages prior to the specified versions.
What vulnerability is addressed by RHSA-2022:7077?
RHSA-2022:7077 addresses CVE-2022-2393, which allows unauthorized users to obtain certificates for other UIDs.
Is there a workaround for RHSA-2022:7077?
There is no specific workaround for RHSA-2022:7077; the recommended action is to apply the security updates.