Vulnerability record · CVE-2018-1080 · published 3 July 2018

CVE-2018-1080: Dogtagpki improper access control vulnerability

Dogtagpki · Dogtagpki

Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and deny rules to be reversed. If a server is configured to process allow rules before deny rules (authz.evaluateOrder=allow,deny), then allow rules will deny access and deny rules will grant access. This may result in an escalation of privileges or have other unintended consequences.

8.1 CVSS 3.0 High EPSS 1.5% · top 26.5% CWE-284 · Improper access control

8.1CVSS 3.0 base score, v2 6.8

1.5%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Dogtagpki Dogtagpki

References

Link	Tags
https://access.redhat.com/errata/RHSA-2018:1979	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1080	Issue TrackingThird Party Advisory
https://pagure.io/freeipa/issue/7453	Third Party Advisory
https://review.gerrithub.io/c/dogtagpki/pki/+/404435	PatchThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:1979	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1080	Issue TrackingThird Party Advisory
https://pagure.io/freeipa/issue/7453	Third Party Advisory
https://review.gerrithub.io/c/dogtagpki/pki/+/404435	PatchThird Party Advisory

Track CVE-2018-1080 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.1CVE-2021-20179Dogtagpki incorrect authorization vulnerabilityA flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and …EPSS 1.2%15 Mar 2021 7.8CVE-2021-3551Dogtagpki cleartext storage of sensitive data vulnerabilityA flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This …EPSS 0.19%16 Feb 2022 7.5CVE-2022-2414Dogtag PKI XML parser allows XXE file disclosureDogtag PKI parses XML documents with external entity resolution enabled, exposing it to XML external entity (XXE) attacks. A remote attacker can send…EPSS 86%analysed29 Jul 2022 7.5CVE-2017-7537Redhat enterprise linux desktop hard-coded credentials vulnerabilityIt was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4.…EPSS 1.5%26 Jul 2018 6.8CVE-2020-15720Dogtagpki improper certificate validation vulnerabilityIn Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests certificate validation. Since the verify parameter wa…EPSS 1.0%14 Jul 2020 6.1CVE-2020-25715Dogtagpki cross-site scripting vulnerabilityA flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject …EPSS 1.1%28 May 2021 6.1CVE-2020-1721Dogtagpki cross-site scripting vulnerabilityA flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a ke…EPSS 0.98%30 Apr 2021 6.1CVE-2019-10179Redhat enterprise linux cross-site scripting vulnerabilityA vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery re…EPSS 0.94%20 Mar 2020

Source: NIST National Vulnerability Database (record CVE-2018-1080), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.