7.5

CVE-2007-4994

EPSS 0.36%
Veröffentlicht 06.11.2007 21:46:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Certificate Server Version7.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.36%	0.55

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://osvdb.org/40440

http://secunia.com/advisories/27557

http://www.redhat.com/support/errata/RHSA-2007-0934.html

http://www.securityfocus.com/bid/26377

http://www.securitytracker.com/id?1020532

http://www.vupen.com/english/advisories/2007/3405

http://www.vupen.com/english/advisories/2007/3406

https://rhn.redhat.com/errata/RHSA-2008-0566.html

https://nvd.nist.gov/vuln/detail/CVE-2007-4994

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-4994

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-4994

EUVD