CVE-2010-3868

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.

CVSS v2.0 5.8 MEDIUM

5.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability : 8.6 / Impact : 4.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=648882
https://rhn.redhat.com/errata/RHSA-2010-0838.html
http://secunia.com/advisories/42181	Vendor Advisory
http://securitytracker.com/id?1024697
https://fedorahosted.org/pki/changeset/1261	Patch
https://rhn.redhat.com/errata/RHSA-2010-0837.html
http://www.osvdb.org/69149

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:redhat:certificate_system:7.3:::::::*
	cpe:2.3:a:redhat:certificate_system:8:::::::*

Configuration 2 (hide)

cpe:2.3:a:redhat:dogtag_certificate_system:*:*:*:*:*:*:*:*

Information

Published : 2010-11-17 08:00

Updated : 2010-11-17 21:00

NVD link : CVE-2010-3868

Mitre link : CVE-2010-3868

JSON object : View

CWE

CWE-287

Improper Authentication

Advertisement

Products Affected

redhat

certificate_system
dogtag_certificate_system

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=648882", "name": "https://bugzilla.redhat.com/show_bug.cgi?id=648882", "tags": [], "refsource": "CONFIRM"}, {"url": "https://rhn.redhat.com/errata/RHSA-2010-0838.html", "name": "RHSA-2010:0838", "tags": [], "refsource": "REDHAT"}, {"url": "http://secunia.com/advisories/42181", "name": "42181", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://securitytracker.com/id?1024697", "name": "1024697", "tags": [], "refsource": "SECTRACK"}, {"url": "https://fedorahosted.org/pki/changeset/1261", "name": "https://fedorahosted.org/pki/changeset/1261", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "https://rhn.redhat.com/errata/RHSA-2010-0837.html", "name": "RHSA-2010:0837", "tags": [], "refsource": "REDHAT"}, {"url": "http://www.osvdb.org/69149", "name": "69149", "tags": [], "refsource": "OSVDB"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-287"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2010-3868", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2010-11-17T16:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:redhat:certificate_system:7.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:redhat:certificate_system:8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:redhat:dogtag_certificate_system:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2010-11-18T05:00Z"}