Vendor
An authentication bypass vulnerability in the Dogtag PKI CMCAuthForEST plugin allows authenticated users to obtain CA-signed certificates with arbitrary subject names due to improper session attribute handling during EST fullcmc requests.