Vulnerability in Dogtag PKI Affects Certificate Validation
CVE-2020-15720
6.8MEDIUM
What is CVE-2020-15720?
In Dogtag PKI versions prior to 10.9.0-b1, the pki.client.PKIConnection class failed to implement proper certificate validation due to a hard-coded 'verify' parameter in all request functions. This oversight rendered systems using this class susceptible to interception through Person-in-the-Middle attacks, particularly in environments outside of localhost. The vulnerability has been addressed in the subsequent release, ensuring enhanced security for users.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved