CVE catalog

CVE-2017-7537

UBUNTU-CVE-2017-7537

[CVE catalog]

Severity
Medium · CVSS 5.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.46% · Oct 25, 2026

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandogtag-pki1110.3.5+12-5fixed
Ubuntudogtag-pkipro10.10.2-3build1vulnerable
Ubuntudogtag-pkipro11.0.0-1vulnerable
Ubuntudogtag-pkipro11.0.0-1ubuntu0.1~esm1fixed
Ubuntudogtag-pkipro10.2.6-1vulnerable
Ubuntudogtag-pkipro10.2.6-2vulnerable
Ubuntudogtag-pkipro10.2.6-3vulnerable
Ubuntudogtag-pkipro10.2.6+git20160317-1vulnerable
Ubuntudogtag-pkipro10.2.6+git20160317-1ubuntu0.1~esm1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandogtag-pkideb1110.3.5+12-5Not reportedDEBIAN-CVE-2017-7537Not reported
Ubuntudogtag-pkidebpro11.0.0-1ubuntu0.1~esm1Not reportedUSN-7146-1Not reported
Ubuntudogtag-pkidebpro10.2.6+git20160317-1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2017-7537Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]