Lucene search
+L

206 matches found

OSV
OSV
added 2018/07/26 1:29 p.m.2 views

DEBIAN-CVE-2017-7537

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates...

7.5CVSS7AI score0.01458EPSS
Exploits1References1
OSV
OSV
added 2018/07/26 1:29 p.m.25 views

CVE-2017-7537

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates...

7.5CVSS6.7AI score0.01458EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2017/09/08 12:0 a.m.41 views

EulerOS 2.0 SP2 : pki-core (EulerOS-SA-2017-1184)

According to the version of the pki-core packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package. An attack...

7.5CVSS6.7AI score0.01458EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2017/08/04 12:0 a.m.29 views

RedHat Update for pki-core RHSA-2017:2335-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.01458EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2017/08/01 11:27 a.m.5 views

pki-core: mock CMC authentication plugin with hardcoded secret enabled by default

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates...

7.5CVSS5.8AI score0.01458EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2017/07/21 10:48 a.m.24 views

CVE-2017-7537

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates...

7.5CVSS3.6AI score0.01458EPSS
Exploits1References1
Rows per page
Query Builder