Bug 2559339 (CVE-2026-115369)
| Summary: | CVE-2026-115369 github.com/openbao/openbao: OpenBao: Unauthorized certificate issuance via CSR IP SAN validation bypass | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in OpenBao. When processing a Certificate Signing Request (CSR) in the Public Key Infrastructure (PKI) engine, the service fails to enforce configured IP address restrictions against requested Subject Alternative Names (SAN). An authenticated remote user with certificate signing privileges can exploit this vulnerability by submitting a request containing restricted IP addresses. Successful exploitation allows the attacker to obtain trusted certificates for unauthorized network addresses, bypassing security controls.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-10-22 20:45:36 UTC
|