(RHSA-2023:2293) Moderate: pki-core security, bug fix, and enhancement update

2023-05-0905:06:45

access.redhat.com

pki core

security fix

user certificates

red hat enterprise linux 9.2

cve-2022-2393

CVSS3

5.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

12.6%

JSON

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.

Security Fix(es):

pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field (CVE-2022-2393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9s390xjss-debugsource< 5.3.0-1.el9jss-debugsource-5.3.0-1.el9.s390x.rpm
RedHat9noarchidm-pki-est< 11.3.0-1.el9idm-pki-est-11.3.0-1.el9.noarch.rpm
RedHat9x86_64jss-debugsource< 5.3.0-1.el9jss-debugsource-5.3.0-1.el9.x86_64.rpm
RedHat9noarchidm-pki-kra< 11.3.0-1.el9idm-pki-kra-11.3.0-1.el9.noarch.rpm
RedHat9noarchidm-pki-java< 11.3.0-1.el9idm-pki-java-11.3.0-1.el9.noarch.rpm
RedHat9x86_64idm-pki-tools< 11.3.0-1.el9idm-pki-tools-11.3.0-1.el9.x86_64.rpm
RedHat9noarchidm-pki-base< 11.3.0-1.el9idm-pki-base-11.3.0-1.el9.noarch.rpm
RedHat9s390xidm-jss< 5.3.0-1.el9idm-jss-5.3.0-1.el9.s390x.rpm
RedHat9noarchpython3-idm-pki< 11.3.0-1.el9python3-idm-pki-11.3.0-1.el9.noarch.rpm
RedHat9noarchidm-pki-server< 11.3.0-1.el9idm-pki-server-11.3.0-1.el9.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	s390x	jss-debugsource	< 5.3.0-1.el9	jss-debugsource-5.3.0-1.el9.s390x.rpm
RedHat	9	noarch	idm-pki-est	< 11.3.0-1.el9	idm-pki-est-11.3.0-1.el9.noarch.rpm
RedHat	9	x86_64	jss-debugsource	< 5.3.0-1.el9	jss-debugsource-5.3.0-1.el9.x86_64.rpm
RedHat	9	noarch	idm-pki-kra	< 11.3.0-1.el9	idm-pki-kra-11.3.0-1.el9.noarch.rpm
RedHat	9	noarch	idm-pki-java	< 11.3.0-1.el9	idm-pki-java-11.3.0-1.el9.noarch.rpm
RedHat	9	x86_64	idm-pki-tools	< 11.3.0-1.el9	idm-pki-tools-11.3.0-1.el9.x86_64.rpm
RedHat	9	noarch	idm-pki-base	< 11.3.0-1.el9	idm-pki-base-11.3.0-1.el9.noarch.rpm
RedHat	9	s390x	idm-jss	< 5.3.0-1.el9	idm-jss-5.3.0-1.el9.s390x.rpm
RedHat	9	noarch	python3-idm-pki	< 11.3.0-1.el9	python3-idm-pki-11.3.0-1.el9.noarch.rpm
RedHat	9	noarch	idm-pki-server	< 11.3.0-1.el9	idm-pki-server-11.3.0-1.el9.noarch.rpm