CVE:CVE-2022-2393
CNNVD:CNNVD-202207-1198
pki-core是一款为PKI操作提供API的库。
pki-core 存在安全漏洞，该漏洞源于使用 caServerKeygen_DirUserCert 配置文件时，用户可以通过在主题字段中输入名称来获取其他 UID 的证书。
solution:Upgrade pki-core_project pki-core to a higher version than 10.12.4,and avoid the version (,10.12.4]; Upgrade redhat certificate_system to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,8.0,9.0,and avoid the version 6.0,7.0,8.0,9.0