CVE-2026-17039
LOW SEVERITYCVSS Score & Metrics
Base Score
3.1 / 10
Vector String
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Vulnerability Description
A flaw was found in pki-core. The certificate authority (CA) renewal request path does not perform the realm-based authorization check that the enrollment path performs, allowing an authenticated user entitled to one realm to cause a certificate belonging to a different realm to be renewed without that realm's authorization.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-863
Source
NVD
Vendor
Red Hat
Product
Red Hat Certificate System 10, Red Hat Certificate System 11, Red Hat Certificate System 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
External References
- https://access.redhat.com/security/cve/CVE-2021-20179
- https://access.redhat.com/security/cve/CVE-2026-17039
- https://bugzilla.redhat.com/show_bug.cgi?id=2506720
- https://github.com/dogtagpki/pki/blob/master/base/ca/database/ds/acl.ldif
- https://github.com/dogtagpki/pki/blob/master/base/ca/src/main/java/com/netscape/cms/servlet/cert/EnrollmentProcessor.java
- https://github.com/dogtagpki/pki/blob/master/base/ca/src/main/java/com/netscape/cms/servlet/cert/RenewalProcessor.java
- https://github.com/dogtagpki/pki/blob/master/base/ca/src/main/java/org/dogtagpki/server/ca/rest/v2/CertServlet.java
- https://github.com/dogtagpki/pki/commit/e2de26769761af04b9c56071bd1a1926903c49b6
Discussion (0)
Add Comment
No comments yet. Be the first!