{"cves":["CVE-2020-11023"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[4.6.8-5.0.1]\n- Blank out header-logo.png product-name.png\n- Replace login-screen-logo.png [Orabug: 20362818]\n\n[4.6.8-5.el7_9.4]\n- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing\n  - wgi/plugins.py: ignore empty plugin directories\n- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find\n  - Improve PKI subsystem detection\n  - ipatests: add test for PKI subsystem detection\n  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection\n- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember\n  - Add more indices\n- Resolves: #1884819 IdM Web UI shows users as disabled\n  - fix cert-find errors in CA-less deployment\n- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate\n  - CAless installation: set the perms on KDC cert file\n  - ipatests: check KDC cert permissions in CA less install\n- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing option elements to manipulation methods could result in untrusted code execution\n  - WebUI: Fix jQuery DOM manipulation issues\n- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts\n  - fix iPAddress cert issuance for 1 host/service","id":"ELSA-2021-0860","ovalId":"oval:com.oracle.elsa:def:20210860","source":"oracle_linux","title":"ELSA-2021-0860:  ipa security and bug fix update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2021-0860.html"}