{
  "cveId": "CVE-2021-3551",
  "url": "https://patchblox.com/security/cve/CVE-2021-3551",
  "summary": "CVE-2021-3551 is fixed in 14 products on 1 platform, first by RHSA-2021:2235, released June 3, 2021. It is not reported as exploited. Patch Radar priority: High.",
  "title": "jss: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.\n\nSecur...",
  "description": "The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.\n\nSecurity Fix(es):\n\n* pki-server: Dogtag installer \u0022pkispawn\u0022 logs admin credentials into a world-readable log file (CVE-2021-3551)\n\nThe PKI installer \u0022pkispawn\u0022 logs admin credentials into a\nworld-readable log file. It also looks like the installer is passing the\npassword as an insecure command line argument. The credentials are the\n389-DS LDAP server\u0027s Directory Manager credentials. The Directory\nManager is 389-DS\u0027 equivalent of unrestricted root account. The user\nbypasses permission checks and grants full access to data. In an IdM /\nFreeIPA installation the DM user is able to read and manipulate Kerberos\nKDC master password, Kerberos keytabs, hashed user passwords, and more.\nAny and all IdM and FreeIPA installations with PKI 10.10 should be\nconsidered compromised.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "published": "2021-06-03T00:00:00Z",
  "severity": "Important",
  "cvss": 7.8,
  "epss": 0.00186,
  "epssPercentile": 0.08229,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "jss",
      "release": "RHEL 8",
      "fixedVersion": "0:4.8.1-2.module\u002Bel8.4.0\u002B10451\u002B3e5b5448",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "jss",
      "release": "ol 8",
      "fixedVersion": "0:4.8.1-2.module\u002Bel8.4.0\u002B20154\u002B9830f79e",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "jss-javadoc",
      "release": "RHEL 8",
      "fixedVersion": "0:4.8.1-2.module\u002Bel8.4.0\u002B10451\u002B3e5b5448",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "jss-javadoc",
      "release": "ol 8",
      "fixedVersion": "0:4.8.1-2.module\u002Bel8.4.0\u002B20154\u002B9830f79e",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ldapjdk",
      "release": "RHEL 8",
      "fixedVersion": "0:4.22.0-1.module\u002Bel8.3.0\u002B6784\u002B6e1e4c62",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ldapjdk",
      "release": "ol 8",
      "fixedVersion": "0:4.22.0-1.module\u002Bel8.3.0\u002B7857\u002B983338ee",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ldapjdk-javadoc",
      "release": "RHEL 8",
      "fixedVersion": "0:4.22.0-1.module\u002Bel8.3.0\u002B6784\u002B6e1e4c62",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "ldapjdk-javadoc",
      "release": "ol 8",
      "fixedVersion": "0:4.22.0-1.module\u002Bel8.3.0\u002B7857\u002B983338ee",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-acme",
      "release": "RHEL 8",
      "fixedVersion": "0:10.10.5-3.module\u002Bel8.4.0\u002B11039\u002B635979e4",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-acme",
      "release": "ol 8",
      "fixedVersion": "0:10.10.5-3.0.1.module\u002Bel8.4.0\u002B20181\u002B8592f730",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-base",
      "release": "RHEL 8",
      "fixedVersion": "0:10.10.5-3.module\u002Bel8.4.0\u002B11039\u002B635979e4",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-base",
      "release": "ol 8",
      "fixedVersion": "0:10.10.5-3.0.1.module\u002Bel8.4.0\u002B20181\u002B8592f730",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-base-java",
      "release": "RHEL 8",
      "fixedVersion": "0:10.10.5-3.module\u002Bel8.4.0\u002B11039\u002B635979e4",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-base-java",
      "release": "ol 8",
      "fixedVersion": "0:10.10.5-3.0.1.module\u002Bel8.4.0\u002B20181\u002B8592f730",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-ca",
      "release": "RHEL 8",
      "fixedVersion": "0:10.10.5-3.module\u002Bel8.4.0\u002B11039\u002B635979e4",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-ca",
      "release": "ol 8",
      "fixedVersion": "0:10.10.5-3.0.1.module\u002Bel8.4.0\u002B20181\u002B8592f730",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-kra",
      "release": "RHEL 8",
      "fixedVersion": "0:10.10.5-3.module\u002Bel8.4.0\u002B11039\u002B635979e4",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-kra",
      "release": "ol 8",
      "fixedVersion": "0:10.10.5-3.0.1.module\u002Bel8.4.0\u002B20181\u002B8592f730",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-server",
      "release": "RHEL 8",
      "fixedVersion": "0:10.10.5-3.module\u002Bel8.4.0\u002B11039\u002B635979e4",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-server",
      "release": "ol 8",
      "fixedVersion": "0:10.10.5-3.0.1.module\u002Bel8.4.0\u002B20181\u002B8592f730",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-symkey",
      "release": "RHEL 8",
      "fixedVersion": "0:10.10.5-3.module\u002Bel8.4.0\u002B11039\u002B635979e4",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-symkey",
      "release": "ol 8",
      "fixedVersion": "0:10.10.5-3.0.1.module\u002Bel8.4.0\u002B20181\u002B8592f730",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-tools",
      "release": "RHEL 8",
      "fixedVersion": "0:10.10.5-3.module\u002Bel8.4.0\u002B11039\u002B635979e4",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pki-tools",
      "release": "ol 8",
      "fixedVersion": "0:10.10.5-3.0.1.module\u002Bel8.4.0\u002B20181\u002B8592f730",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-pki",
      "release": "RHEL 8",
      "fixedVersion": "0:10.10.5-3.module\u002Bel8.4.0\u002B11039\u002B635979e4",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-pki",
      "release": "ol 8",
      "fixedVersion": "0:10.10.5-3.0.1.module\u002Bel8.4.0\u002B20181\u002B8592f730",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tomcatjss",
      "release": "RHEL 8",
      "fixedVersion": "0:7.6.1-1.module\u002Bel8.4.0\u002B8778\u002Bd07929ff",
      "fix": "RHSA-2021:2235",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2021-2235",
      "released": "2021-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "tomcatjss",
      "release": "ol 8",
      "fixedVersion": "0:7.6.1-1.module\u002Bel8.4.0\u002B20053\u002B7cddd5b6",
      "fix": "ELSA-2021-2235",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-2235",
      "released": "2021-06-04T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}