← Vulnerability feed

Vulnerability record · CVE-2020-15720 · published 14 July 2020

CVE-2020-15720: Dogtagpki improper certificate validation vulnerability

Dogtagpki · Dogtagpki

In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests certificate validation. Since the verify parameter was hard-coded in all request functions, it was not possible to override the setting. As a result, tools making use of this class, such as the pki-server command, may have been vulnerable to Person-in-the-Middle attacks in certain non-localhost use cases. This is fixed in 10.9.0-b1.

6.8 CVSS 3.1 Medium EPSS 1.0% · top 38.4% CWE-295 · Improper certificate validation
6.8CVSS 3.1 base score, v2 4.0
1.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests certificate validation. Since the verify parameter was hard-coded in all request functions, it was not possible to override the setting. As a result, tools making use of this class, such as the pki-server command, may have been vulnerable to Person-in-the-Middle attacks in certain non-localhost use cases. This is fixed in 10.9.0-b1.

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://bugzilla.redhat.com/show_bug.cgi?id=1855273 Issue TrackingPatchThird Party Advisory
https://github.com/dogtagpki/pki/commit/50c23ec146ee9abf28c9de87a5f7787d495f0b72 PatchThird Party Advisory
https://github.com/dogtagpki/pki/compare/v10.9.0-a2...v10.9.0-b1 PatchThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1855273 Issue TrackingPatchThird Party Advisory
https://github.com/dogtagpki/pki/commit/50c23ec146ee9abf28c9de87a5f7787d495f0b72 PatchThird Party Advisory
https://github.com/dogtagpki/pki/compare/v10.9.0-a2...v10.9.0-b1 PatchThird Party Advisory

Track CVE-2020-15720 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.1CVE-2021-20179Dogtagpki incorrect authorization vulnerabilityA flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and …EPSS 1.2%8.1CVE-2018-1080Dogtagpki improper access control vulnerabilityDogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and…EPSS 1.5%7.8CVE-2021-3551Dogtagpki cleartext storage of sensitive data vulnerabilityA flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This …EPSS 0.19%7.5CVE-2022-2414Dogtag PKI XML parser allows XXE file disclosureDogtag PKI parses XML documents with external entity resolution enabled, exposing it to XML external entity (XXE) attacks. A remote attacker can send…EPSS 86%analysed7.5CVE-2017-7537Redhat enterprise linux desktop hard-coded credentials vulnerabilityIt was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4.…EPSS 1.5%6.1CVE-2020-25715Dogtagpki cross-site scripting vulnerabilityA flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject …EPSS 1.1%6.1CVE-2020-1721Dogtagpki cross-site scripting vulnerabilityA flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a ke…EPSS 0.98%6.1CVE-2019-10179Redhat enterprise linux cross-site scripting vulnerabilityA vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery re…EPSS 0.94%

Source: NIST National Vulnerability Database (record CVE-2020-15720), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.