CVE-2012-3367

Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
VendorProductVersion
redhatcertificate_system
𝑥
≤ 8.1
redhatcertificate_system
7.1
redhatcertificate_system
7.2
redhatcertificate_system
7.3
redhatcertificate_system
8.0
redhatdogtag_certificate_system
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/84098
http://rhn.redhat.com/errata/RHSA-2012-1103.html
http://secunia.com/advisories/50013
http://www.securityfocus.com/bid/54608
http://www.securitytracker.com/id?1027284
https://bugzilla.redhat.com/show_bug.cgi?id=836268
https://exchange.xforce.ibmcloud.com/vulnerabilities/77102
https://fedorahosted.org/pki/changeset/2430
http://osvdb.org/84098
http://rhn.redhat.com/errata/RHSA-2012-1103.html
http://secunia.com/advisories/50013
http://www.securityfocus.com/bid/54608
http://www.securitytracker.com/id?1027284
https://bugzilla.redhat.com/show_bug.cgi?id=836268
https://exchange.xforce.ibmcloud.com/vulnerabilities/77102
https://fedorahosted.org/pki/changeset/2430