CVE-2021-3551
Assigner: redhat
Published: 2022-02-16T16:37:57
State: PUBLISHED
affected: product: pki-server
vendor: n/a
versions: status: affected
version: pki-core 10.10.6
descriptions: value: A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.
problemTypes: descriptions: cweId: CWE-312
description: CWE-312
type: CWE