CVE-2021-20179

CVE-2021-20179 affects pki-core: an attacker who has compromised a key could renew the same certificate repeatedly as long as it isn’t revoked. Connected Nessus entries (MiracleLinux, Alibaba Cloud Linux, Rocky Linux, RHEL/Rocky family, NewStart CGSL, Oracle Linux, etc.) reference the same flaw i...

CVE-2022-2393

CVE-2022-2393 in pki-core describes a flaw where, when directory-based authentication is enabled, an authenticated attacker on an adjacent network can abuse the caServerKeygen_DirUserCert profile to obtain a certificate for another user identity (i.e., a different UID) by populating the Subject f...

CVE-2020-1696

CVE-2020-1696 affects all pki-core 10.x.x versions where the Token Processing Service (TPS) fails to sanitize Profile IDs, enabling Stored XSS when the profile ID is printed. The issue is described as Stored XSS in TPS profile creation/Activity tab across Red Hat advisory references, with an atta...

CVE-2019-10180

The CVE-2019-10180 issue affects all pki-core 10.x.x versions where the Token Processing Service (TPS) unsafely stored or sanitized token parameters, enabling Stored XSS. The root cause is improper sanitization of several parameters stored for tokens, allowing an attacker who can modify token par...

CVE-2012-4543

CVE-2012-4543 describes multiple XSS vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) pageStart or (2) pageSize parameters to the displayCRL script, or (3) nonce variable to the profileProcess sc...

CVE-2009-0588

The CVE-2009-0588 issue affects Red Hat Certificate System 7.3 (RA/Registration Authority) and Dogtag Certificate System, where agent/request/op.cgi processing allowed remote authenticated users to approve certificate requests in arbitrary agent-group queues by manipulating the request ID. Root c...

CVE-2012-2662

CVE-2012-2662 affects Red Hat Certificate System (RHCS) and Dogtag Certificate System. The vulnerability enables multiple cross-site scripting (XSS) in the web interface via unspecified parameters on the System Agent and End Entity pages, allowing remote attackers to inject arbitrary scripts/HTML...

CVE-2012-4555

CVE-2012-4555 affects Red Hat Certificate System (RHCS) pki-tps before version 8.1.3. The vulnerability arises from improper handling of interruptions during token format operations, allowing a remote attacker to cause a denial of service via a NULL pointer dereference, crashing the Apache httpd ...

CVE-2013-1886

CVE-2013-1886 is a format-string vulnerability in Red Hat Certificate System (RHCS) pki-tps (token processing system). The flaw, affecting RHCS 8.1 and possibly Dogtag Certificate System 9–10, could allow a remote authenticated user to crash the Apache HTTP Server or potentially execute arbitrary...

CVE-2010-3869

CVE-2010-3869 affects Red Hat Certificate System (RHCS) 7.3/8 and Dogtag Certificate System, enabling remote authenticated users to generate an unlimited number of certificates by replaying a single SCEP one-time PIN. The associated Red Hat advisory RHSA-2010:0837/0838 documents this alongside re...

CVE-2010-3868

CVE-2010-3868 affects Red Hat Certificate System (RHCS) 7.3/8 and Dogtag Certificate System: unauthenticated decryption of SCEP one-time PINs in SCEP requests allows remote attackers who sniff the network to obtain PINs. Red Hat/RHSA advisories (0837/0838) fix this by restricting decryption to au...

CVE-2012-3367

CVE-2012-3367 affects Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System. Root cause: the web interface failed to properly validate certificate revocation requests, allowing an agent with permissions to revoke end-entity certificates to revoke the CA certificate. Impact:...

CVE-2013-1885

CVE-2013-1885 affects Red Hat Certificate System (RHCS) 8.1 (and possibly Dogtag Certificate System 9/10) via the pki-tps component. A cross-site scripting flaw allows remote attackers to inject arbitrary web script or HTML by manipulating PATH_INFO (to tus/ or tus/tus/). The issue stems from ins...

CVE-2008-5082

The CVE-2008-5082 issue affects Red Hat Certificate System (RHCS) 7.1–7.3 and Dogtag Certificate System 1.0, where the TPS verifyProof function could succeed enrollment with a software key even when a hardware key was expected. This allows remote authenticated users with enrollment privileges to ...

CVE-2017-7509

CVE-2017-7509 affects the Red Hat Certificate System prior to version 8.1.20-1. Root cause: input validation error in handling of client-provided certificates when the certreq field is missing, triggering an assertion error and causing a denial of service. Impact: denial of service with partial t...

CVE-2008-2367

CVE-2008-2367 affects Red Hat Certificate System 7.2. The root cause is insecure default file permissions on configuration files (e.g., password.conf) allowing local attackers to read sensitive credentials. Connected advisories note remediation via updated packages for Red Hat Certificate System ...

CVE-2008-2368

Red Hat Certificate System 7.2 stores passwords in cleartext in debug/log files (e.g., UserDirEnrollment log and RA wizard installer log) and uses weak file permissions, enabling local read access. The issue is fixed in Red Hat advisories RHSA-2009:0006/0007 by updating pkisetup, rhpki-* and rela...

CVE-2012-4556

CVE-2012-4556 affects Red Hat Certificate System (RHCS) under the token processing component pki-tps. The issue allows remote attackers to cause a denial-of-service by triggering an Apache httpd child process restart through certain unspecified empty search fields in a user certificate search que...