Lack of data validation In pki-core
Description
A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's ExternalProcessConstraint mechanism to execute arbitrary commands with attacker-controlled environment variables, achieving code execution as the pkiuser account.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel10 | 0:11.9.0-5.el10_2 | ||
rpm rhel6 | - | - | |
rpm rhel7 | - | - | |
rpm rhel8 | - | - | |
rpm rhel9 | 0:11.7.1-2.el9_8 | ||
rpm rhel10.0 | 0:11.6.0-3.el10_0.1 | ||
rpm rhel9.6 | 0:11.6.0-4.el9_6 |
Aliases
1. 2. 3.