A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7077 advisory.

    The Public Key Infrastructure (PKI) Core contains fundamental packages     required by Red Hat Certificate System.

    Security Fix(es):

    * CVE-2022-2393 pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for     other UIDs by entering name in Subject field [rhcs_9.7] [BZ #2111493]

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This plugin was deprecated due to incorrect CVE matches for the build.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the pki- core-11.3.0-0.2.beta1.el9 build changelog.

  - Improper authentication/authorization with caServerKeygen_DirUserCert profile (CVE-2022-2393)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2304 advisory.

    A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when     directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent     network to impersonate another user within the scope of the domain, but they would not be able to decrypt     message content. (CVE-2022-2393)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3394 advisory.

    The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate     System.

    Security Fix(es):

    * pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)

    * pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by     entering name in Subject field (CVE-2022-2393)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2293 advisory.

    - Bug #2106459 - CVE-2022-2393 pki-core: Improper authentication/authorization with     caServerKeygen_DirUserCert profile
    - Bug #2107336 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE     [rhel-9.1.0]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:2293 advisory.

  - A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when     directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent     network to impersonate another user within the scope of the domain, but they would not be able to decrypt     message content. (CVE-2022-2393)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:2293 advisory.

    The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate     System.

    Security Fix(es):

    * pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by     entering name in Subject field (CVE-2022-2393)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7086 advisory.

    - Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external       entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
    - Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the       caServerKeygen_DirUserCert profile, user can get certificates for other       UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
    - Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external       entities when parsing XML can lead to XXE [certificate_system_9.7.z]       (ckelley, mharmsen)
    - Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the       caServerKeygen_DirUserCert profile, user can get certificates for other       UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)
    - Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external       entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
    - Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the       caServerKeygen_DirUserCert profile, user can get certificates for other       UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
    - Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external       entities when parsing XML can lead to XXE [certificate_system_9.7.z]       (ckelley, mharmsen)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7086 advisory.

    The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate     System.

    Security Fix(es):

    * pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by     entering name in Subject field (CVE-2022-2393)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
196293	RHEL 6 : pki-core (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
194204	RHEL 7 : Red Hat Certificate System 9.7 CVE update (Moderate) (RHSA-2022:7077)	Nessus	Red Hat Local Security Checks	medium
191285	CentOS 9 : pki-core-11.3.0-1.el9 (deprecated)	Nessus	CentOS Local Security Checks	medium
191237	CentOS 9 : pki-core-11.3.0-0.2.beta1.el9	Nessus	CentOS Local Security Checks	medium
183474	Amazon Linux 2 : pki-core (ALAS-2023-2304)	Nessus	Amazon Linux Local Security Checks	medium
176536	RHEL 8 : pki-core:10.6 (RHSA-2023:3394)	Nessus	Red Hat Local Security Checks	high
175677	Oracle Linux 9 : pki-core (ELSA-2023-2293)	Nessus	Oracle Linux Local Security Checks	medium
175621	AlmaLinux 9 : pki-core (ALSA-2023:2293)	Nessus	Alma Linux Local Security Checks	medium
175457	RHEL 9 : pki-core (RHSA-2023:2293)	Nessus	Red Hat Local Security Checks	medium
166438	Oracle Linux 7 : pki-core (ELSA-2022-7086)	Nessus	Oracle Linux Local Security Checks	medium
166431	RHEL 7 : pki-core (RHSA-2022:7086)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2022-2393

medium

Tenable Plugins

high

medium

medium

medium

medium

high

medium

medium

medium

medium

medium