CVE-2010-3868

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.

CVSS v2.0 5.8 MEDIUM

5.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability : 8.6 / Impact : 4.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/42181	Vendor Advisory
http://securitytracker.com/id?1024697
http://www.osvdb.org/69149
https://bugzilla.redhat.com/show_bug.cgi?id=648882
https://fedorahosted.org/pki/changeset/1261	Patch
https://rhn.redhat.com/errata/RHSA-2010-0837.html
https://rhn.redhat.com/errata/RHSA-2010-0838.html

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:redhat:certificate_system:7.3:::::::*
	cpe:2.3:a:redhat:certificate_system:8:::::::*

Configuration 2 (hide)

cpe:2.3:a:redhat:dogtag_certificate_system:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-11-17 16:00

Updated : 2010-11-18 05:00

NVD link : CVE-2010-3868

Mitre link : CVE-2010-3868

CVE.ORG link : CVE-2010-3868

JSON object : View

Products Affected

redhat

dogtag_certificate_system
certificate_system

CWE

CWE-287

Improper Authentication

{"id": "CVE-2010-3868", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-11-17T16:00:01.873", "references": [{"url": "http://secunia.com/advisories/42181", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://securitytracker.com/id?1024697", "source": "secalert@redhat.com"}, {"url": "http://www.osvdb.org/69149", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=648882", "source": "secalert@redhat.com"}, {"url": "https://fedorahosted.org/pki/changeset/1261", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "https://rhn.redhat.com/errata/RHSA-2010-0837.html", "source": "secalert@redhat.com"}, {"url": "https://rhn.redhat.com/errata/RHSA-2010-0838.html", "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component."}, {"lang": "es", "value": "Red Hat Certificate System (RHCS) v7.3 y v8 y Dogtag Certificate System no requieren autenticaci\u00f3n en peticiones para descifrar PINs SCEP one-time, lo que permite a atacantes remotos la obtenci\u00f3n de PINs rastreando el tr\u00e1fico de red para peticiones SCEP y a continuaci\u00f3n enviando peticiones de descifrado al componente Certificate Authority."}], "lastModified": "2010-11-18T05:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:certificate_system:7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2654E6A-190C-4D5C-ABC0-89011DD8E293"}, {"criteria": "cpe:2.3:a:redhat:certificate_system:8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2EF75FF-FCDB-433C-A7B9-4DBAABAC6643"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:dogtag_certificate_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06D606EF-447B-42C5-ADBE-14515257262B"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}