Yüksek CVSS 8.4
CVE-2026-109141: CVE-2026-109141: güvenlik açığı
Açıklama (NVD)
The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for every request that is not tied to a CA, including the bulk import endpoint POST /api/v1/bulk/cas/import. It adds a new child CA under any existing CA, gives the child any of that CA's resources, and creates the ROAs given in the request
Özet bilgiler
- CVSS v3.1
- 8.4
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L - EPSS
- %0,28 (yüzdelik 20)
- CWE
- CWE-639
- Yama
- Yok / bilinmiyor