CVEvulnerability
CVE-2012-3367
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-08-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:P
- Weaknesses
- CWE-310
Description
Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.
Affected configurations
• redhat certificate system (<= 8.1)
• redhat certificate system 7.1
• redhat certificate system 7.2
• redhat certificate system 7.3
• redhat certificate system 8
• redhat certificate system 8.0
• redhat dogtag certificate system
Related
Weakness · not in database (1)
References
- http://osvdb.org/84098 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2012-1103.html rhn.redhat.com
- http://secunia.com/advisories/50013 Vendor Advisory
- http://www.securityfocus.com/bid/54608 www.securityfocus.com
- http://www.securitytracker.com/id?1027284 www.securitytracker.com
- https://bugzilla.redhat.com/show_bug.cgi?id=836268 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77102 exchange.xforce.ibmcloud.com
- https://fedorahosted.org/pki/changeset/2430 Exploit, Patch
- http://osvdb.org/84098 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2012-1103.html rhn.redhat.com
- http://secunia.com/advisories/50013 Vendor Advisory
- http://www.securityfocus.com/bid/54608 www.securityfocus.com
- http://www.securitytracker.com/id?1027284 www.securitytracker.com
- https://bugzilla.redhat.com/show_bug.cgi?id=836268 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77102 exchange.xforce.ibmcloud.com
- https://fedorahosted.org/pki/changeset/2430 Exploit, Patch