CyberRota Analysis
AI-GeneratedAn Apache-proxied Dogtag CA REST endpoint is vulnerable to unauthenticated malformed requests, which trigger HTTP 500 errors that expose internal Java stack traces. This vulnerability can lead to log amplification, resulting in excessive disk growth and I/O contention, potentially impacting system performance. Organizations using Apache and Java, particularly those implementing Dogtag CA, should prioritize addressing this issue to mitigate resource exhaustion risks.
Original NVD Description
An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. The same unauthenticated error path emits large multi-line stack traces into the CA debug log, creating a log-amplification resource exhaustion vector (disk growth and I/O contention) without requiring authentication.