A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-3551
• https://bugzilla.redhat.com/show_bug.cgi?id=1959971