Redhat

Certificate System

18 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2012-3367

Exploit
  • EPSS 0.4%
  • Published 13.08.2012 20:55:08
  • Last modified 11.04.2025 00:51:21

Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to r...

4.3

CVE-2012-2662

  • EPSS 0.24%
  • Published 13.08.2012 20:55:05
  • Last modified 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to the (1) System Agent or (2...

4

CVE-2010-3869

  • EPSS 0.2%
  • Published 17.11.2010 16:00:01
  • Last modified 11.04.2025 00:51:21

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN.

5.8

CVE-2010-3868

  • EPSS 0.28%
  • Published 17.11.2010 16:00:01
  • Last modified 11.04.2025 00:51:21

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sendin...

6.5

CVE-2009-0588

  • EPSS 0.46%
  • Published 27.05.2009 16:30:01
  • Last modified 09.04.2025 00:30:58

agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modifie...

6

CVE-2008-5082

  • EPSS 0.2%
  • Published 30.01.2009 19:30:00
  • Last modified 09.04.2025 00:30:58

The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 through 7.3 and Dogtag Certificate System 1.0 returns successfully even when token enrollment did not use the hardware key, which allows ...

2.1

CVE-2008-2367

  • EPSS 0.03%
  • Published 20.01.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files.

2.1

CVE-2008-2368

  • EPSS 0.03%
  • Published 20.01.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

Red Hat Certificate System 7.2 stores passwords in cleartext in the UserDirEnrollment log, the RA wizard installer log, and unspecified other debug log files, and uses weak permissions for these files, which allows local users to discover passwords b...