Lucene search

[email protected]CVE-2017-7537

HistoryJul 26, 2018 - 1:29 p.m.

CVE-2017-7537

2018-07-2613:29:00

CWE-798

CWE-592

[email protected]

web.nvd.nist.gov

cve-2017-7537

authentication bypass

pki

security vulnerability

certificate issuance

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.3%

JSON

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

Affected configurations

Vulners

NVD

Node

dogtag_pkipki-coreRange≤10.6.4

CPENameOperatorVersion
redhat:enterprise_linux_desktopredhat enterprise linux desktopeq7.0
redhat:enterprise_linux_serverredhat enterprise linux servereq7.0
redhat:enterprise_linux_workstationredhat enterprise linux workstationeq7.0

CPE	Name	Operator	Version
redhat:enterprise_linux_desktop	redhat enterprise linux desktop	eq	7.0
redhat:enterprise_linux_server	redhat enterprise linux server	eq	7.0
redhat:enterprise_linux_workstation	redhat enterprise linux workstation	eq	7.0

CNA Affected

[
  {
    "product": "pki-core",
    "vendor": "Dogtag PKI",
    "versions": [
      {
        "status": "affected",
        "version": "10.6.4"
      }
    ]
  }
]