CVE-2019-14823

A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to attacks such as Man in the Middle.

• CWE-358
• CWE-295

• https://access.redhat.com/errata/RHSA-2019:3067Exploit, Patch, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:3225
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14823Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ENEN4DQBE6WOGEP5BQ5X62WZM7ZQEEBG/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O53NXVKMF7PJCPMCJQHLMSYCUGDHGBVE/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UZZWZLNALV6AOIBIHB3ZMNA5AGZMZAIY/
• https://access.redhat.com/errata/RHSA-2019:3067Exploit, Patch, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:3225
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14823Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ENEN4DQBE6WOGEP5BQ5X62WZM7ZQEEBG/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O53NXVKMF7PJCPMCJQHLMSYCUGDHGBVE/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UZZWZLNALV6AOIBIHB3ZMNA5AGZMZAIY/

Published

Oct 14, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14818A flaw was found in all dpdk version 17.x.x before 17.11.8, …7.5
• CVE-2019-14819A flaw was found during the upgrade of an existing OpenShift…8.8
• CVE-2019-1482Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14820It was found that keycloak before version 8.0.0 exposes inte…4.3
• CVE-2019-14821An out-of-bounds access issue was found in the Linux kernel,…8.8
• CVE-2019-14822A flaw was discovered in ibus in versions before 1.5.22 that…7.1
• CVE-2019-14824A flaw was found in the 'deref' plugin of 389-ds-base where …6.5
• CVE-2019-14825A cleartext password storage issue was discovered in Katello…2.7
• CVE-2019-14826A flaw was found in FreeIPA versions 4.5.0 and later. Sessio…4.4
• CVE-2019-14827A vulnerability was found in Moodle where javaScript injecti…6.1
• CVE-2019-14828A vulnerability was found in Moodle affecting 3.7 to 3.7.1, …4.3
• CVE-2019-14829A vulnerability was found in Moodle affection 3.7 to 3.7.1, …4.3