CVE:CVE-2021-20179
CNNVD:CNNVD-202103-917
pki-core是一款为PKI操作提供API的库。
pki-core 存在安全漏洞，攻击者可利用该漏洞可以反复更新相应的证书，只要证书没有被显式撤销。
solution:Upgrade dogtagpki dogtagpki to a higher version than 10.5.0,10.8.0,10.9.0,10.10.0,10.11.0,and avoid the version (,10.5.0),[10.5.1,10.8.0),[10.8.1,10.9.0),[10.9.1,10.10.0),[10.10.1,10.11.0); Upgrade redhat certificate_system to a higher version than 10.0,and avoid the version 10.0; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade fedoraproject fedora to a higher version than 32,33,34,and avoid the version 32,33,34