RHSA-2024_4070

Vulnerability from csaf_redhat - Published: 2024-06-24 15:52 - Updated: 2024-12-06 14:57
Summary
Red Hat Security Advisory: Red Hat Certificate System 10.4 for RHEL 8 security and bug fix update
Severity
Important
Notes
Topic: An update for pki-core is now available for Red Hat Certificate System 10.4 for RHEL 8.6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link in the References section.
Details: Red Hat Certificate System (RHCS) is a complete implementation of an enterprise software system designed to manage enterprise Public Key Infrastructure (PKI) deployments. Security fixes: - Token authentication bypass vulnerability (BZ2232221 - CVE-2023-4727) - Renaming the option ops-flag and ops-flag-mask (BZ2275455) - Rebase to TomcatJSS 7.7.4 - Rename enableOCSP to enableRevocationCheck (BZ2275095) - Rebase to JSS 4.9.9 - Enable revocation verification using CRL-DP (BZ2274531) Users of RHCS 10 are advised to upgrade to these updated packages.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2023-4727

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.

7.5 (High)
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-305 - Authentication Bypass by Primary Weakness
Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2024:4070
References
Acknowledgments
Calif Pham Van Khanh
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for pki-core is now available for Red Hat Certificate System 10.4 for RHEL 8.6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Certificate System (RHCS) is a complete implementation of an enterprise software system designed to manage enterprise Public Key Infrastructure (PKI) deployments.\n\nSecurity fixes:\n\n- Token authentication bypass vulnerability (BZ2232221 - CVE-2023-4727)\n- Renaming the option ops-flag and ops-flag-mask (BZ2275455) \n- Rebase to TomcatJSS 7.7.4\n- Rename enableOCSP to enableRevocationCheck (BZ2275095)\n- Rebase to JSS 4.9.9\n- Enable revocation verification using CRL-DP (BZ2274531)\n\nUsers of RHCS 10 are advised to upgrade to these updated packages.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:4070",
        "url": "https://access.redhat.com/errata/RHSA-2024:4070"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4070.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Certificate System 10.4 for RHEL 8 security and bug fix update",
    "tracking": {
      "current_release_date": "2024-12-06T14:57:41+00:00",
      "generator": {
        "date": "2024-12-06T14:57:41+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.2"
        }
      },
      "id": "RHSA-2024:4070",
      "initial_release_date": "2024-06-24T15:52:13+00:00",
      "revision_history": [
        {
          "date": "2024-06-24T15:52:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-06-24T15:52:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-12-06T14:57:41+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Certificate System 10.4 EUS for RHEL 8",
                "product": {
                  "name": "Red Hat Certificate System 10.4 EUS for RHEL 8",
                  "product_id": "8Base-CertSys-10.4-EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:certificate_system_eus:10.4::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Certificate System"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "redhat-pki:10:8060020240529205458:07fb4edf",
                "product": {
                  "name": "redhat-pki:10:8060020240529205458:07fb4edf",
                  "product_id": "redhat-pki:10:8060020240529205458:07fb4edf",
                  "product_identification_helper": {
                    "purl": "pkg:rpmmod/redhat/redhat-pki@10:8060020240529205458:07fb4edf"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.noarch",
                "product": {
                  "name": "idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.noarch",
                  "product_id": "idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-console-framework@1.3.0-1.module%2Bel8pki%2B14677%2B1ef79a68?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
                "product": {
                  "name": "ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
                  "product_id": "ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ldapjdk@4.23.0-1.module%2Bel8pki%2B14677%2B1ef79a68?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ldapjdk-javadoc-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
                "product": {
                  "name": "ldapjdk-javadoc-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
                  "product_id": "ldapjdk-javadoc-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ldapjdk-javadoc@4.23.0-1.module%2Bel8pki%2B14677%2B1ef79a68?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "python3-redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "python3-redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-redhat-pki@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-acme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "redhat-pki-acme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "redhat-pki-acme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-acme@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-base-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "redhat-pki-base-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "redhat-pki-base-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-base@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-base-java-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "redhat-pki-base-java-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "redhat-pki-base-java-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-base-java@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-ca-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "redhat-pki-ca-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "redhat-pki-ca-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-ca@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-console-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "redhat-pki-console-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "redhat-pki-console-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-console@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-console-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "redhat-pki-console-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "redhat-pki-console-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-console-theme@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-est-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "redhat-pki-est-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "redhat-pki-est-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-est@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-javadoc-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "redhat-pki-javadoc-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "redhat-pki-javadoc-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-javadoc@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-kra-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "redhat-pki-kra-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "redhat-pki-kra-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-kra@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-ocsp-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "redhat-pki-ocsp-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "redhat-pki-ocsp-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-ocsp@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-server-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "redhat-pki-server-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "redhat-pki-server-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-server@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-server-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "redhat-pki-server-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "redhat-pki-server-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-server-theme@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-tks-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                "product": {
                  "name": "redhat-pki-tks-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_id": "redhat-pki-tks-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-tks@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.noarch",
                "product": {
                  "name": "tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.noarch",
                  "product_id": "tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcatjss@7.7.4-1.module%2Bel8pki%2B21738%2B33a5e23b?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.src",
                "product": {
                  "name": "idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.src",
                  "product_id": "idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/idm-console-framework@1.3.0-1.module%2Bel8pki%2B14677%2B1ef79a68?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.src",
                "product": {
                  "name": "jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.src",
                  "product_id": "jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jss@4.9.10-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.src",
                "product": {
                  "name": "ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.src",
                  "product_id": "ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ldapjdk@4.23.0-1.module%2Bel8pki%2B14677%2B1ef79a68?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.src",
                "product": {
                  "name": "redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.src",
                  "product_id": "redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.src",
                "product": {
                  "name": "tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.src",
                  "product_id": "tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/tomcatjss@7.7.4-1.module%2Bel8pki%2B21738%2B33a5e23b?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
                "product": {
                  "name": "jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_id": "jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jss@4.9.10-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jss-debuginfo-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
                "product": {
                  "name": "jss-debuginfo-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_id": "jss-debuginfo-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jss-debuginfo@4.9.10-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jss-debugsource-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
                "product": {
                  "name": "jss-debugsource-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_id": "jss-debugsource-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jss-debugsource@4.9.10-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jss-javadoc-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
                "product": {
                  "name": "jss-javadoc-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_id": "jss-javadoc-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jss-javadoc@4.9.10-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                "product": {
                  "name": "redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_id": "redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                "product": {
                  "name": "redhat-pki-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_id": "redhat-pki-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-debuginfo@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-debugsource-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                "product": {
                  "name": "redhat-pki-debugsource-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_id": "redhat-pki-debugsource-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-debugsource@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-symkey-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                "product": {
                  "name": "redhat-pki-symkey-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_id": "redhat-pki-symkey-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-symkey@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-symkey-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                "product": {
                  "name": "redhat-pki-symkey-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_id": "redhat-pki-symkey-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-symkey-debuginfo@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-tools-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                "product": {
                  "name": "redhat-pki-tools-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_id": "redhat-pki-tools-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-tools@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-tools-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                "product": {
                  "name": "redhat-pki-tools-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_id": "redhat-pki-tools-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-tools-debuginfo@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-tps-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                "product": {
                  "name": "redhat-pki-tps-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_id": "redhat-pki-tps-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-tps@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "redhat-pki-tps-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                "product": {
                  "name": "redhat-pki-tps-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_id": "redhat-pki-tps-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/redhat-pki-tps-debuginfo@10.13.11-1.module%2Bel8pki%2B21949%2B4b2d0700?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
        },
        "product_reference": "redhat-pki:10:8060020240529205458:07fb4edf",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.noarch"
        },
        "product_reference": "idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.src as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.src"
        },
        "product_reference": "idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.src",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.src as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.src"
        },
        "product_reference": "jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.src",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64 as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64"
        },
        "product_reference": "jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jss-debuginfo-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64 as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-debuginfo-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64"
        },
        "product_reference": "jss-debuginfo-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jss-debugsource-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64 as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-debugsource-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64"
        },
        "product_reference": "jss-debugsource-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jss-javadoc-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64 as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-javadoc-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64"
        },
        "product_reference": "jss-javadoc-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch"
        },
        "product_reference": "ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.src as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.src"
        },
        "product_reference": "ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.src",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ldapjdk-javadoc-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:ldapjdk-javadoc-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch"
        },
        "product_reference": "ldapjdk-javadoc-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:python3-redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "python3-redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.src as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.src"
        },
        "product_reference": "redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.src",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64"
        },
        "product_reference": "redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-acme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-acme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "redhat-pki-acme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-base-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-base-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "redhat-pki-base-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-base-java-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-base-java-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "redhat-pki-base-java-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-ca-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-ca-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "redhat-pki-ca-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-console-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-console-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "redhat-pki-console-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-console-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-console-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "redhat-pki-console-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64"
        },
        "product_reference": "redhat-pki-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-debugsource-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-debugsource-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64"
        },
        "product_reference": "redhat-pki-debugsource-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-est-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-est-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "redhat-pki-est-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-javadoc-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-javadoc-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "redhat-pki-javadoc-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-kra-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-kra-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "redhat-pki-kra-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-ocsp-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-ocsp-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "redhat-pki-ocsp-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-server-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-server-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "redhat-pki-server-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-server-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-server-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "redhat-pki-server-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-symkey-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-symkey-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64"
        },
        "product_reference": "redhat-pki-symkey-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-symkey-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-symkey-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64"
        },
        "product_reference": "redhat-pki-symkey-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-tks-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tks-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch"
        },
        "product_reference": "redhat-pki-tks-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-tools-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tools-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64"
        },
        "product_reference": "redhat-pki-tools-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-tools-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tools-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64"
        },
        "product_reference": "redhat-pki-tools-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-tps-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tps-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64"
        },
        "product_reference": "redhat-pki-tps-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "redhat-pki-tps-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64 as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tps-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64"
        },
        "product_reference": "redhat-pki-tps-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.noarch as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.noarch"
        },
        "product_reference": "tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.noarch",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.src as a component of redhat-pki:10:8060020240529205458:07fb4edf as a component of Red Hat Certificate System 10.4 EUS for RHEL 8",
          "product_id": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.src"
        },
        "product_reference": "tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.src",
        "relates_to_product_reference": "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Pham Van Khanh"
          ],
          "organization": "Calif"
        }
      ],
      "cve": "CVE-2023-4727",
      "cwe": {
        "id": "CWE-305",
        "name": "Authentication Bypass by Primary Weakness"
      },
      "discovery_date": "2023-08-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2232218"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ca: token authentication bypass vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.src",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.src",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-debuginfo-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-debugsource-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-javadoc-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.src",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:ldapjdk-javadoc-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:python3-redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.src",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-acme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-base-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-base-java-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-ca-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-console-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-console-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-debugsource-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-est-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-javadoc-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-kra-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-ocsp-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-server-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-server-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-symkey-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-symkey-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tks-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tools-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tools-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tps-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tps-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.noarch",
          "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-4727"
        },
        {
          "category": "external",
          "summary": "RHBZ#2232218",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2232218"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-4727",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-4727"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-4727",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4727"
        }
      ],
      "release_date": "2024-06-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-06-24T15:52:13+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.src",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.src",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-debuginfo-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-debugsource-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-javadoc-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.src",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:ldapjdk-javadoc-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:python3-redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.src",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-acme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-base-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-base-java-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-ca-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-console-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-console-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-debugsource-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-est-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-javadoc-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-kra-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-ocsp-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-server-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-server-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-symkey-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-symkey-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tks-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tools-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tools-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tps-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tps-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:4070"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:idm-console-framework-0:1.3.0-1.module+el8pki+14677+1ef79a68.src",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.src",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-debuginfo-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-debugsource-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:jss-javadoc-0:4.9.10-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:ldapjdk-0:4.23.0-1.module+el8pki+14677+1ef79a68.src",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:ldapjdk-javadoc-0:4.23.0-1.module+el8pki+14677+1ef79a68.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:python3-redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.src",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-acme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-base-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-base-java-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-ca-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-console-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-console-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-debugsource-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-est-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-javadoc-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-kra-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-ocsp-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-server-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-server-theme-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-symkey-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-symkey-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tks-0:10.13.11-1.module+el8pki+21949+4b2d0700.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tools-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tools-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tps-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:redhat-pki-tps-debuginfo-0:10.13.11-1.module+el8pki+21949+4b2d0700.x86_64",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.noarch",
            "8Base-CertSys-10.4-EUS:redhat-pki:10:8060020240529205458:07fb4edf:tomcatjss-0:7.7.4-1.module+el8pki+21738+33a5e23b.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ca: token authentication bypass vulnerability"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.