CyberRota Analysis
AI-GeneratedA vulnerability exists in the certificate authority renewal process of pki-core, where the realm-based authorization check is bypassed, allowing an authenticated user to renew certificates from a different realm without proper authorization. This could lead to unauthorized certificate issuance, potentially compromising the integrity of the affected realms. Organizations utilizing pki-core for certificate management should prioritize addressing this issue to mitigate risks associated with unauthorized certificate renewals.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in pki-core. The certificate authority (CA) renewal request path does not perform the realm-based authorization check that the enrollment path performs, allowing an authenticated user entitled to one realm to cause a certificate belonging to a different realm to be renewed without that realm's authorization.