Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Dogtag PKI Certificate Renewal Without Authentication
published 7 months ago
Summary
A security issue affects Dogtag PKI, a tool used for managing digital certificates. An attacker could potentially use this flaw to keep using a compromised certificate, which could grant them unauthorized access to a system or resource. To protect your system, update Dogtag PKI to the latest version to address this issue.
What to do
- Update canonical dogtag-pki to version 10.6.0-1ubuntu2+esm1.
- Update canonical dogtag-pki to version 10.8.3-1ubuntu1+esm1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:18.04:LTS | canonical | dogtag-pki |
< 10.6.0-1ubuntu2+esm1 Fix: upgrade to 10.6.0-1ubuntu2+esm1
|
| Ubuntu:Pro:20.04:LTS | canonical | dogtag-pki |
< 10.8.3-1ubuntu1+esm1 Fix: upgrade to 10.8.3-1ubuntu1+esm1
|
Original advisory text
dogtag-pki vulnerability
Fraser Tweedale and Geetika Kapoor discovered that Dogtag PKI could renew a
certificate without proper authentication. An attacker could possibly use
this to repeatedly renew a compromised certificate and maintain
unauthorized access to a system or resource.
certificate without proper authentication. An attacker could possibly use
this to repeatedly renew a compromised certificate and maintain
unauthorized access to a system or resource.
References
- https://ubuntu.com/security/notices/USN-8158-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2021-20179 Third Party Advisory
Timeline
Published8 Apr 2026
Updated15 Apr 2026
First seen15 Apr 2026
Sources
USN-8158-1 · OSV
Track software like this
Free during beta