Is CVE-2021-20179 actively exploited?

CVE-2021-20179 has no public evidence of in-the-wild exploitation as of 2024-11-21.

What is the CVSS score for CVE-2021-20179?

CVE-2021-20179 has a CVSS score of 8.1 (HIGH severity). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

How do I patch CVE-2021-20179?

Patch guidance is available from dogtagpki security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2021-20179.

Fix CVE-2021-20179 - HIGH dogtagpki dogtagpki

Q: Which products are affected by CVE-2021-20179?

11 products: dogtagpki dogtagpki, dogtagpki dogtagpki, dogtagpki dogtagpki, dogtagpki dogtagpki, dogtagpki dogtagpki, and 6 more.

Description

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.

CVSS Metrics

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector: network
Complexity: low
Privileges: low
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: none
Weaknesses: CWE-863 · Incorrect Authorization CWE-863 · Incorrect Authorization

Metadata

Primary Vendor: DOGTAGPKI
Published: 3/15/2021
Last Modified: 11/21/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

dogtagpki : dogtagpkidogtagpki : dogtagpkidogtagpki : dogtagpkidogtagpki : dogtagpkidogtagpki : dogtagpkiredhat : certificate_systemredhat : enterprise_linuxredhat : enterprise_linuxfedoraproject : fedorafedoraproject : fedorafedoraproject : fedora

Remediation Guidance

Executive Summary

View on NIST NVD