Vulnerability · Published Jul 29, 2022 · Assigned by redhat
CVE-2022-2414
High 7.5
In plain English
A high-severity XML external entity in Dogtag PKI. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 85.4% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)85.4%top 0.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling2Nuclei, Public PoC
Official description
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | idm-pki-acme | 10.12.0-4.module_el8.7.0+3316+50b99934 | ALSA-2022:7470 |
| AlmaLinux:8 | idm-pki-base | 10.12.0-4.module_el8.7.0+3316+50b99934 | ALSA-2022:7470 |
| AlmaLinux:8 | idm-pki-base-java | 10.12.0-4.module_el8.7.0+3316+50b99934 | ALSA-2022:7470 |
| AlmaLinux:8 | idm-pki-ca | 10.12.0-4.module_el8.7.0+3316+50b99934 | ALSA-2022:7470 |
| AlmaLinux:8 | idm-pki-kra | 10.12.0-4.module_el8.7.0+3316+50b99934 | ALSA-2022:7470 |
| AlmaLinux:8 | idm-pki-server | 10.12.0-4.module_el8.7.0+3316+50b99934 | ALSA-2022:7470 |
| AlmaLinux:8 | idm-pki-symkey | 10.12.0-4.module_el8.7.0+3316+50b99934 | ALSA-2022:7470 |
| AlmaLinux:8 | idm-pki-tools | 10.12.0-4.module_el8.7.0+3316+50b99934 | ALSA-2022:7470 |
| AlmaLinux:8 | ldapjdk-javadoc | 4.23.0-1.module_el8.6.0+2764+9fc58d50 | ALSA-2022:7470 |
| AlmaLinux:9 | pki-acme | 11.0.6-2.el9_0 | ALSA-2022:7326 |
| AlmaLinux:9 | pki-base | 11.0.6-2.el9_0 | ALSA-2022:7326 |
| AlmaLinux:9 | pki-base-java | 11.0.6-2.el9_0 | ALSA-2022:7326 |
| AlmaLinux:9 | pki-ca | 11.0.6-2.el9_0 | ALSA-2022:7326 |
| AlmaLinux:9 | pki-kra | 11.0.6-2.el9_0 | ALSA-2022:7326 |
| AlmaLinux:9 | pki-server | 11.0.6-2.el9_0 | ALSA-2022:7326 |
| AlmaLinux:9 | pki-symkey | 11.0.6-2.el9_0 | ALSA-2022:7326 |
| AlmaLinux:9 | pki-tools | 11.0.6-2.el9_0 | ALSA-2022:7326 |
| AlmaLinux:8 | python3-idm-pki | 10.12.0-4.module_el8.7.0+3316+50b99934 | ALSA-2022:7470 |
| AlmaLinux:9 | python3-pki | 11.0.6-2.el9_0 | ALSA-2022:7326 |
| Rocky Linux:8 | apache-commons-collections | 0:3.2.2-10.module+el8.3.0+74+855e3f5d | RLSA-2022:7470 |
| Rocky Linux:8 | apache-commons-collections | 0:3.2.2-10.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | apache-commons-lang | 0:2.6-21.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | apache-commons-lang | 0:2.6-21.module+el8.3.0+74+855e3f5d | RLSA-2022:7470 |
| Rocky Linux:8 | apache-commons-net | 0:3.6-3.module+el8.3.0+74+855e3f5d | RLSA-2022:7470 |
| Rocky Linux:8 | apache-commons-net | 0:3.6-3.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | bea-stax | 0:1.2.0-16.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | glassfish-fastinfoset | 0:1.2.13-9.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | glassfish-jaxb | 0:2.2.11-11.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | glassfish-jaxb-api | 0:2.2.12-8.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | jackson-annotations | 0:2.10.0-1.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | jackson-core | 0:2.10.0-1.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | jackson-databind | 0:2.10.0-1.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | jackson-jaxrs-providers | 0:2.9.9-1.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | jackson-module-jaxb-annotations | 0:2.7.6-4.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+74+855e3f5d | RLSA-2022:7470 |
| Rocky Linux:8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | javassist | 0:3.18.1-8.module+el8.3.0+74+855e3f5d | RLSA-2022:7470 |
| Rocky Linux:8 | javassist | 0:3.18.1-8.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | jss | 0:4.9.4-1.module+el8.7.0+1069+6f3de942 | RLSA-2022:7470 |
| Rocky Linux:8 | ldapjdk | 0:4.23.0-1.module+el8.7.0+1069+6f3de942 | RLSA-2022:7470 |
| Rocky Linux:8 | ldapjdk | 0:4.23.0-1.module+el8.5.0+701+8dc610e5 | RLSA-2022:7470 |
| Rocky Linux:8 | pki-core | 0:10.12.0-4.module+el8.7.0+1069+6f3de942 | RLSA-2022:7470 |
| Rocky Linux:9 | pki-core | 0:11.0.6-2.el9_0 | RLSA-2022:7326 |
| Rocky Linux:8 | python-nss | 0:1.0.1-10.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | relaxngDatatype | 0:2011.1-7.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | resteasy | 0:3.0.26-6.module+el8.5.0+697+f586bb30 | RLSA-2022:7470 |
| Rocky Linux:8 | slf4j | 0:1.7.25-4.module+el8.5.0+697+f586bb30 | RLSA-2022:7470 |
| Rocky Linux:8 | slf4j | 0:1.7.25-4.module+el8.3.0+74+855e3f5d | RLSA-2022:7470 |
| Rocky Linux:8 | slf4j | 0:1.7.25-4.module+el8.3.0+133+b8b54b58 | RLSA-2022:7470 |
| Rocky Linux:8 | stax-ex | 0:1.7.7-8.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | tomcatjss | 0:7.7.1-1.module+el8.6.0+788+76246f77 | RLSA-2022:7470 |
| Rocky Linux:8 | velocity | 0:1.7-24.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | velocity | 0:1.7-24.module+el8.3.0+74+855e3f5d | RLSA-2022:7470 |
| Rocky Linux:8 | xalan-j2 | 0:2.7.1-38.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | xalan-j2 | 0:2.7.1-38.module+el8.3.0+74+855e3f5d | RLSA-2022:7470 |
| Rocky Linux:8 | xerces-j2 | 0:2.11.0-34.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | xerces-j2 | 0:2.11.0-34.module+el8.3.0+74+855e3f5d | RLSA-2022:7470 |
| Rocky Linux:8 | xml-commons-apis | 0:1.4.01-25.module+el8.5.0+697+f586bb30 | RLSA-2022:7470 |
| Rocky Linux:8 | xml-commons-apis | 0:1.4.01-25.module+el8.3.0+74+855e3f5d | RLSA-2022:7470 |
| Rocky Linux:8 | xml-commons-apis | 0:1.4.01-25.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | xml-commons-resolver | 0:1.2-26.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | xml-commons-resolver | 0:1.2-26.module+el8.3.0+74+855e3f5d | RLSA-2022:7470 |
| Rocky Linux:8 | xmlstreambuffer | 0:1.5.4-8.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
| Rocky Linux:8 | xsom | 0:0-19.20110809svn.module+el8.3.0+53+ea062990 | RLSA-2022:7470 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Dogtag PKI | Affected versions: 10.5.18, 10.7.4, 10.8.3, 10.11.2, 10.12.4, 11.0.5, 11.1.0 |
Weakness: CWE-611
References
- https://github.com/dogtagpki/pki/pull/4021 x_refsource_MISC