Beveiligingsadvies

CVE-2026-11873

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-01 11:54:59

Laatst bijgewerkt 2026-09-01 17:42:36

Toegewezen door redhat

CVSS-score 6.5

Status PUBLISHED

Beschrijving

An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. The same unauthenticated error path emits large multi-line stack traces into the CA debug log, creating a log-amplification resource exhaustion vector (disk growth and I/O contention) without requiring authentication.

← Alle CVE's bekijken Bekijk op cve.org ↗