A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially crafted value that will be executed on the victim's browser.
{ "binaries": [ { "binary_name": "dogtag-pki", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "dogtag-pki-console-theme", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "dogtag-pki-server-theme", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "libsymkey-java", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "libsymkey-jni", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-base", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-ca", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-console", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-javadoc", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-kra", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-ocsp", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-server", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-tks", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-tools", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-tps", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" }, { "binary_name": "pki-tps-client", "binary_version": "10.2.6+git20160317-1ubuntu0.1~esm1" } ] }
{ "binaries": [ { "binary_name": "dogtag-pki", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "dogtag-pki-console-theme", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "dogtag-pki-server-theme", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "libsymkey-java", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "libsymkey-jni", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-base", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-base-java", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-ca", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-console", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-javadoc", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-kra", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-ocsp", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-server", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-tks", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-tools", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-tps", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "pki-tps-client", "binary_version": "10.6.0-1ubuntu2" }, { "binary_name": "python3-pki-base", "binary_version": "10.6.0-1ubuntu2" } ] }
{ "binaries": [ { "binary_name": "dogtag-pki", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "dogtag-pki-console-theme", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "dogtag-pki-server-theme", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "libsymkey-java", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "libsymkey-jni", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-base", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-base-java", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-ca", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-console", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-javadoc", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-kra", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-ocsp", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-server", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-tks", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-tools", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-tps", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "pki-tps-client", "binary_version": "10.8.3-1ubuntu1" }, { "binary_name": "python3-pki-base", "binary_version": "10.8.3-1ubuntu1" } ] }