dogtag-pki is vulnerable to man-in-the-middle attack. The certificate validation is disabled by default and is not configurable, allowing an attacker to perform a man-in-the-middle attack to intercept and modify network traffic
CPE | Name | Operator | Version |
---|---|---|---|
dogtag-pki | le | 10.7.4.1 |