CVE-2010-3869

CWE-3106 documents6 sources
Severity
4.0MEDIUM
EPSS
0.2%
top 58.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Redhat Certificate System
Timeline
PublishedNov 17
Latest updateMay 17

Description

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: fedorahosted.org ↗Patch: fedorahosted.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-5f9q-v927-crw8: Red Hat Certificate System (RHCS) 7↗2022-05-17
▶
CVEList
CVE-2010-3869: Red Hat Certificate System (RHCS) 7↗2010-11-17
▶

💥Exploits & PoCs

1
Exploit-DB
Sun Java - JRE AWT setDiffICM Buffer Overflow (Metasploit)↗2010-09-20
▶

📋Vendor Advisories

1
Red Hat
System: SCEP one-time PIN reuse↗2010-11-08
▶

💬Community

1
Bugzilla
CVE-2010-3869 Certificate System: SCEP one-time PIN reuse↗2010-11-02
▶
CVE-2010-3869 (MEDIUM CVSS 4) | Red Hat Certificate System (RHCS) 7 | cvebase.io