CVE-2012-3367 in Red Hat Certificate System

Tóm tắt

Bởi MITRE

Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Đặt trước: 14/06/2012
• Tiết lộ: 13/08/2012
• Kiểm duyệt: được chấp nhận
• mục: VDB-5784
• CPE: sẵn sàng
• CWE: CWE-310 (Đã xác nhận)
• CVSS: 5.5 (NVD)
• EPSS: 0.01163
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-3367
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-3367
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-3367/