SecuritySpace - CVE-2018-1080

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2018-1080

Description: Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and deny rules to be reversed. If a server is configured to process allow rules before deny rules (authz.evaluateOrder=allow,deny), then allow rules will deny access and deny rules will grant access. This may result in an escalation of privileges or have other unintended consequences.

Test IDs: 1.3.6.1.4.1.25623.1.0.882916

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-1080
RedHat Security Advisories: RHSA-2018:1979
https://access.redhat.com/errata/RHSA-2018:1979

CVE ID:	CVE-2018-1080
Description:	Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and deny rules to be reversed. If a server is configured to process allow rules before deny rules (authz.evaluateOrder=allow,deny), then allow rules will deny access and deny rules will grant access. This may result in an escalation of privileges or have other unintended consequences.
Test IDs:	1.3.6.1.4.1.25623.1.0.882916
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1080 RedHat Security Advisories: RHSA-2018:1979 https://access.redhat.com/errata/RHSA-2018:1979