Threats tagged 'ghsa-p4hg-66rh-w2c8'

A vulnerability in the Krill server occurs when a Certificate Authority's (CA) parent resides on the same server. Instead of properly building and verifying a signed CMS message, the server runs the RFC 6492 provisioning exchange in-process and trusts the child identity provided by the caller without verification. This flaw allows the parent CA to trust a child identity that may not actually belong to the CA making the request.