70 matches found
CVE-2010-3869
Red Hat Certificate System RHCS 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN...
Code injection
Red Hat Certificate System RHCS 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN...
Authentication flaw
Red Hat Certificate System RHCS 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authorit...
CVE-2010-3868
CVE-2010-3868 affects Red Hat Certificate System (RHCS) 7.3/8 and Dogtag Certificate System: unauthenticated decryption of SCEP one-time PINs in SCEP requests allows remote attackers who sniff the network to obtain PINs. Red Hat/RHSA advisories (0837/0838) fix this by restricting decryption to au...
CVE-2010-3869
Red Hat Certificate System RHCS 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN...
System: unauthenticated user can request SCEP one-time PIN decryption
Red Hat Certificate System RHCS 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authorit...
Moderate: Red Hat Security Advisory: pki security and enhancement update
Updated pki-ca, pki-util, and pki-common packages that fix three security issues and add several enhancements are now available for Red Hat Certificate System 8. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...
SCEP: Signature Enabled
Detects whether the SCEP product's signature is enabled...