5.5

CVE-2012-3367

Exploit

EPSS 0.4%
Published 13.08.2012 20:55:08
Last modified 11.04.2025 00:51:21
Source secalert@redhat.com
Teams watchlist Login
Open Login

Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.

Affected products Warnungen 0 Metrics 2 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Redhat ≫ Certificate System Version <= 8.1

Redhat ≫ Certificate System Version7.1

Redhat ≫ Certificate System Version7.2

Redhat ≫ Certificate System Version7.3

Redhat ≫ Certificate System Version8

Redhat ≫ Certificate System Version8.0

Redhat ≫ Dogtag Certificate System

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.4%	0.577

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	8	4.9	AV:N/AC:L/Au:S/C:N/I:P/A:P

http://rhn.redhat.com/errata/RHSA-2012-1103.html

http://secunia.com/advisories/50013

Vendor Advisory

http://www.securityfocus.com/bid/54608

http://www.securitytracker.com/id?1027284

http://osvdb.org/84098

https://bugzilla.redhat.com/show_bug.cgi?id=836268

https://exchange.xforce.ibmcloud.com/vulnerabilities/77102

https://fedorahosted.org/pki/changeset/2430

Patch

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2012-3367

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-3367

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-3367

EUVD