CVE-2021-3551

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-312

Affected software

Vendor	Product	Versions
n/a	pki-server	pki-core 10.10.6

References

https://bugzilla.redhat.com/show_bug.cgi?id=1959971Issue Tracking, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1959971Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Feb 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-355126.5An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200.CVE-2021-355136.1Mermaid before 8.11.0 allows XSS when the antiscript feature is used.CVE-2021-355149.8Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel.CVE-2021-355157.5When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop.CVE-2021-355167.5When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory CVE-2021-355177.5When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memor CVE-2021-35527.5A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attack CVE-2021-355206.2A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate a CVE-2021-355215.9A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated at CVE-2021-355229.8A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, CVE-2021-355237.8Securepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHO CVE-2021-355255.3PostSRSd before 1.11 allows a denial of service (subprocess hang) if Postfix sends certain long data fields such as multiple concatenated em