CVE-2010-3869

EUVD-2010-3847
Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
Affected Products (NVD)
VendorProductVersion
redhatcertificate_system
7.3
redhatdogtag_certificate_system
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/42181
http://securitytracker.com/id?1024697
http://www.osvdb.org/69148
https://bugzilla.redhat.com/show_bug.cgi?id=648883
https://fedorahosted.org/pki/changeset/1246
https://rhn.redhat.com/errata/RHSA-2010-0837.html
https://rhn.redhat.com/errata/RHSA-2010-0838.html
http://secunia.com/advisories/42181
http://securitytracker.com/id?1024697
http://www.osvdb.org/69148
https://bugzilla.redhat.com/show_bug.cgi?id=648883
https://fedorahosted.org/pki/changeset/1246
https://rhn.redhat.com/errata/RHSA-2010-0837.html
https://rhn.redhat.com/errata/RHSA-2010-0838.html