CVE:CVE-2019-14823
CNNVD:CNNVD-201910-817
JSS CryptoManager是一款JSS（Java网络安全服务）加密管理软件包。
JSS CryptoManager 4.4.6之后版本、4.5.3之后版本和4.6.0之后版本中‘Leaf and Chain’OCSP协议的实现存在安全特征问题漏洞。攻击者可利用该漏洞实施中间人等攻击。
solution:Upgrade jss_cryptomanager_project jss_cryptomanager to a higher version than 4.4.7,4.5.4,4.6.2,and avoid the version [4.4.6,4.4.7],[4.5.3,4.5.4],[4.6.0,4.6.2]; Upgrade redhat enterprise_linux to a higher version than 6.0,6.1,6.2,6.3,6.4,6.5,6.6,6.7,6.8,6.9,6.10,7.0,7.1,7.2,7.3,7.4,7.5,7.6,7.7,8.0,and avoid the version 6.0,6.1,6.2,6.3,6.4,6.5,6.6,6.7,6.8,6.9,6.10,7.0,7.1,7.2,7.3,7.4,7.5,7.6,7.7,8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.7,and avoid the version 7.7; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.7,and avoid the version 7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.7,and avoid the version 7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0