Security Advisory

CVE-2026-53682

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-01 12:37:50
Last updated 2026-09-01 15:27:06
Assigner redhat
CVSS score 5.3
State PUBLISHED

Description

An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles (security domain topology and participating subsystems), without requiring a principal, client certificate, or session.