Authentication flaw

The verifyProof function in the Token Processing System TPS component in Red Hat Certificate System RHCS 7.1 through 7.3 and Dogtag Certificate System 1.0 returns successfully even when token enrollment did not use the hardware key, which allows remote authenticated users with enrollment privileg...

CVE-2008-5082

The CVE-2008-5082 issue affects Red Hat Certificate System (RHCS) 7.1–7.3 and Dogtag Certificate System 1.0, where the TPS verifyProof function could succeed enrollment with a software key even when a hardware key was expected. This allows remote authenticated users with enrollment privileges to ...

CVE-2008-1676

Red Hat PKI Common Framework rhpki-common in Red Hat Certificate System aka Certificate Server or RHCS 7.1 through 7.3, and Netscape Certificate Management System 6.x, does not recognize Certificate Authority profile constraints on Extensions, which might allow remote attackers to bypass intended...

CVE-2008-1676

The CVE-2008-1676 issue concerns Red Hat Certificate System’s PKI Common Framework (rhpki-common) used by RHCS and Netscape Certificate Management System. The root cause is that certificate signing request (CSR) processing did not honor Certificate Authority profile constraints on Extensions, ena...

CVE-2007-4994

CVE-2007-4994 affects Red Hat Certificate System (RHCS) where new revocations generated during CRL creation could cause revoked certificates to be omitted from the CRL, enabling a bypass of revocation for some certificates. Supported by Red Hat advisories (RHSA-2007:0934; RHSA-2008:0566) and rela...