Lucene search

K
cve[email protected]CVE-2012-4543
HistoryJan 04, 2013 - 10:55 p.m.

CVE-2012-4543

2013-01-0422:55:01
CWE-79
web.nvd.nist.gov
32
cve-2012-4543
cross-site scripting
xss vulnerabilities
red hat certificate system
rhcs
security
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize to the displayCRL script, or (3) nonce variable to the profileProcess script.

Affected configurations

NVD
Node
redhatcertificate_systemRange8.1.1
OR
redhatcertificate_systemMatch7.1
OR
redhatcertificate_systemMatch7.2
OR
redhatcertificate_systemMatch7.3
OR
redhatcertificate_systemMatch8
OR
redhatcertificate_systemMatch8.0
OR
redhatcertificate_systemMatch8.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%