NetSight
IP …
medium5.8

CVE-2010-3868

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allow…

Impact

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.

Affected products

VendorProductAffected versions
RedhatCertificate System
Versions 7.3, 8
RedhatDogtag Certificate System
All versions

Weakness classification

CWE-287

References