Vulnerability in Red Hat Certificate System
CVE-2010-3869
Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN.
Vulnerability class: POODLE (CVE-2014-3566)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.0 (Medium). Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.008 (55.9th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 56th percentile — 55.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000
Affected products
- Red Hat Certificate System — versions 7.3, 8
- Red Hat Dogtag Certificate System
Weakness classification (CWE)
References
- bugzilla.redhat.com/show_bug.cgi
- rhn.redhat.com/errata/RHSA-2010-0837.html (vendor-advisory, Vendor Advisory)
- fedorahosted.org/pki/changeset/1246 (Patch)
- rhn.redhat.com/errata/RHSA-2010-0838.html (vendor-advisory, Vendor Advisory)
- securitytracker.com/id (vdb-entry)
- www.osvdb.org/69148 (vdb-entry)
- secunia.com/advisories/42181 (Vendor Advisory, third-party-advisory)