Security Advisory

CVE-2010-3868

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-11-17 15:00:00

Last updated 2024-08-07 03:26:12

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.

← Browse all CVEs View on cve.org ↗