CVE-2009-0588

Severity

65%

Complexity

80%

Confidentiality

106%

agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.

agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.

CVSS 2.0 Base Score 6.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:P/I:P/A:P).

Overview

Type

Red

First reported 16 years ago

2009-05-27 16:30:00

Last updated 15 years ago

2009-06-09 05:32:00

Affected Software

Red Hat Certificate System 7.3

7.3

Redhat Dogtag Certificate System

References

35242

35263

RHSA-2009:1065

Patch, Vendor Advisory

35104

1022278

https://bugzilla.redhat.com/show_bug.cgi?id=484828

Patch

https://bugzilla.redhat.com/show_bug.cgi?id=488706

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.