The vulnerability occurs when an unauthenticated empty request is sent to the Dogtag CA REST endpoint /ca/rest/certrequests. The server responds with a 500 error and sends a full Java stack trace in the HTTP response, exposing internal implementation details. In addition, the exception is logged to the CA debug log, producing large multi-line traces that can quickly consume disk space and I/O resources, leading to a denial-of-service via log amplification. This results in information disclosure (sensitive data in stack traces) and potential resource exhaustion.

The affected products are Red Hat Certificate System 9 and several Red Hat Enterprise Linux releases: 6, 7, 8, 9, and 10, as mentioned by the CNA. The specific endpoint is part of the dogtag‑pki component exposed by Red Hat IdM.

The CVSS score is 6.5, indicating moderate severity. The EPSS score is not available, and the vulnerability is not listed in KEV, suggesting no known widespread exploitation. The attack vector is likely networkable through the exposed REST API; an unauthenticated client can trigger the error by sending an empty POST request, so protection relies on the API failing safely. Although no formal patch is announced yet, the CNA proposes a workaround that moves authentication checks earlier, returns simple 4xx errors, and rate-limits stack‑trace logging.