vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2019-14823

HIGH
7.4
CVSS Score
Published: October 14, 2019 at 07:35 PM UTC
Updated: June 17, 2026 at 02:19 AM UTC
9 products affected across 3 vendorsEnterprise LinuxEnterprise Linux DesktopEnterprise Linux Server· also runs on 1 platform

Using JSS by Dogtag?

Get instant alerts when new vulnerabilities affect JSS - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.4
Exploit prediction
EPSS 0.9%

Description

A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to attacks such as Man in the Middle.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Jss Cryptomanager· Jss Cryptomanager Project
95%
4.4.6 ≤ v ≤ 4.4.74.5.3 ≤ v ≤ 4.5.44.6.0 ≤ v ≤ 4.6.2
linux-linux-kernel (environment)
Enterprise Linux· Red Hatrpm
95%
6.06.16.106.26.36.46.56.66.76.86.97.07.17.27.37.47.57.67.78.0
linux-linux-kernel (environment)
Enterprise Linux Desktop· Red Hatrubygems
95%
7.0
linux-linux-kernel (environment)
Enterprise Linux Eus· Red Hatrpm
95%
7.7
linux-linux-kernel (environment)
Enterprise Linux Server· Red Hatrubygems
95%
7.0
linux-linux-kernel (environment)
Enterprise Linux Server Aus· Red Hatrubygems
95%
7.7
linux-linux-kernel (environment)
Enterprise Linux Server Tus· Red Hatrubygems
95%
7.7
linux-linux-kernel (environment)
Enterprise Linux Workstation· Red Hatrubygems
95%
7.0
linux-linux-kernel (environment)
JSS· Dogtag
60%
affects >= 4.4.6affects >= 4.5.3affects >= 4.6.0

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

References (6)

Vendor Advisoryx_refsource_REDHATExploitPatchThird Party Advisory
Source: [email protected]
https://access.redhat.com/errata/RHSA-2019:3067
Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
https://access.redhat.com/errata/RHSA-2019:3225
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
Source: [email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14823
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ENEN4DQBE6WOGEP5BQ5X62WZM7ZQEEBG/
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O53NXVKMF7PJCPMCJQHLMSYCUGDHGBVE/
Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UZZWZLNALV6AOIBIHB3ZMNA5AGZMZAIY/

CVSS

7.4HIGH[email protected]
Attack Vector
NETWORK
Complexity
HIGH
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-358CWE-295

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card