Red Hat Security Advisory: pki-deps:10.6 security update
This security advisory from Red Hat addresses vulnerabilities in the Public Key Infrastructure (PKI) Core packages required by Red Hat Certificate System. It includes fixes for two Apache Tomcat vulnerabilities: a bypass of rules in the Rewrite Valve (CVE-2025-31651) and a directory traversal via rewrite with possible remote code execution (CVE-2025-55752). The update is rated as important by Red Hat Product Security and affects Red Hat Enterprise Linux 8.4 AUS and EUS extensions. No CVSS scores are provided in the advisory.
AI Analysis
Technical Summary
The advisory covers security fixes for two Apache Tomcat vulnerabilities within the pki-deps:10.6 module used by Red Hat Certificate System. CVE-2025-31651 involves bypassing rules in the Tomcat Rewrite Valve, while CVE-2025-55752 involves a directory traversal vulnerability via rewrite that could lead to remote code execution. These vulnerabilities affect Red Hat Enterprise Linux 8.4 Advanced Update Support (AUS) and Extended Update Support (EUS) versions. The advisory references Red Hat's errata RHSA-2026:2724 and provides links for applying the update. The vulnerabilities are rated as important by Red Hat, but no CVSS scores are included in the advisory.
Potential Impact
Successful exploitation of CVE-2025-31651 could allow bypassing of rewrite rules in Apache Tomcat, potentially undermining intended access controls. CVE-2025-55752 could allow directory traversal via rewrite rules, which may lead to remote code execution on affected systems. These impacts could compromise the security of Red Hat Certificate System deployments relying on the affected packages.
Mitigation Recommendations
An update for the pki-deps:10.6 module is available for Red Hat Enterprise Linux 8.4 AUS and EUS extensions that addresses these vulnerabilities. Administrators should apply this official Red Hat update as detailed in the advisory (RHSA-2026:2724) and the referenced Red Hat article (https://access.redhat.com/articles/11258). No alternative mitigations or workarounds are specified. Patch status is confirmed by the vendor advisory as an official fix.
Red Hat Security Advisory: pki-deps:10.6 security update
Description
This security advisory from Red Hat addresses vulnerabilities in the Public Key Infrastructure (PKI) Core packages required by Red Hat Certificate System. It includes fixes for two Apache Tomcat vulnerabilities: a bypass of rules in the Rewrite Valve (CVE-2025-31651) and a directory traversal via rewrite with possible remote code execution (CVE-2025-55752). The update is rated as important by Red Hat Product Security and affects Red Hat Enterprise Linux 8.4 AUS and EUS extensions. No CVSS scores are provided in the advisory.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The advisory covers security fixes for two Apache Tomcat vulnerabilities within the pki-deps:10.6 module used by Red Hat Certificate System. CVE-2025-31651 involves bypassing rules in the Tomcat Rewrite Valve, while CVE-2025-55752 involves a directory traversal vulnerability via rewrite that could lead to remote code execution. These vulnerabilities affect Red Hat Enterprise Linux 8.4 Advanced Update Support (AUS) and Extended Update Support (EUS) versions. The advisory references Red Hat's errata RHSA-2026:2724 and provides links for applying the update. The vulnerabilities are rated as important by Red Hat, but no CVSS scores are included in the advisory.
Potential Impact
Successful exploitation of CVE-2025-31651 could allow bypassing of rewrite rules in Apache Tomcat, potentially undermining intended access controls. CVE-2025-55752 could allow directory traversal via rewrite rules, which may lead to remote code execution on affected systems. These impacts could compromise the security of Red Hat Certificate System deployments relying on the affected packages.
Mitigation Recommendations
An update for the pki-deps:10.6 module is available for Red Hat Enterprise Linux 8.4 AUS and EUS extensions that addresses these vulnerabilities. Administrators should apply this official Red Hat update as detailed in the advisory (RHSA-2026:2724) and the referenced Red Hat article (https://access.redhat.com/articles/11258). No alternative mitigations or workarounds are specified. Patch status is confirmed by the vendor advisory as an official fix.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:2724
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-55752"]
Threat ID: 6a2929b98dd33fbd8517f087
Added to database: 06/10/2026, 09:09:13 UTC
Last enriched: 06/27/2026, 23:55:37 UTC
Last updated: 09/10/2026, 19:36:50 UTC
Views: 56
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.