CVE-2012-3367 in Red Hat Certificate System

Riassunto

di MITRE

Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 14/06/2012
• Divulgazione: 13/08/2012
• Moderazione: accettato
• Voce: VDB-5784
• CPE: pronto
• CWE: CWE-310 (confermato)
• CVSS: 5.5 (NVD)
• EPSS: 0.01163
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-3367
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-3367
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-3367/