CVE-2021-3551CWE-312

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file

published February 16, 2022

CVSS
—
EPSS
0%
Percentile
7.8
In the wild
Unconfirmed
What it is

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00186 · 7.8th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2022-02-16T16:37Z
EPSS history
Timeline
  • 16 FEB 16:37Z
    A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file
    cvelistv5