CVE:CVE-2021-3551
CNNVD:CNNVD-202106-207
PKI-server是一个运行在JBoss服务器上的J2EE应用程序。旨在自动加密/解密数据和应用/验证具有标志的数字签名。
PKI-server 存在安全漏洞，本地攻击者可利用该漏洞检索文件，以获得管理员密码和Dogtag CA管理器的管理员特权。
solution:Upgrade dogtagpki dogtagpki to a higher version than 10.10.6,and avoid the version [10.10.0,10.10.6); Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade oracle linux to a higher version than 8,and avoid the version 8; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.4,and avoid the version 8.4; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_for_ibm_z_systems_eus to a higher version than 8.4,and avoid the version 8.4; Upgrade redhat enterprise_linux_for_power_little_endian to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_for_power_little_endian_eus to a higher version than 8.4,and avoid the version 8.4; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.4,and avoid the version 8.4; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.4,and avoid the version 8.4; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 8.4,and avoid the version 8.4