CVE-2012-3367
published 2012-08-13CVE-2012-3367: Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web…
PriorityP424medium5.5CVSS 2.0
AVNACLAuSCNIPAP
EPSS
1.16%
63.7th percentile
Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | certificate_system | <= 8.1 | — |
| redhat | certificate_system | — | — |
| redhat | certificate_system | — | — |
| redhat | certificate_system | — | — |
| redhat | certificate_system | — | — |
| redhat | certificate_system | — | — |
CVSS provenance
nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jh3f-4cfw-pgf7: Red Hat Certificate System (RHCS) before 8
ghsa_unreviewed·2022-05-17
CVE-2012-3367 [MEDIUM] GHSA-jh3f-4cfw-pgf7: Red Hat Certificate System (RHCS) before 8
Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.
Red Hat
System: CA certificate can be revoked
vendor_redhat·2012-07-19·CVSS 5.5
CVE-2012-3367 [MEDIUM] System: CA certificate can be revoked
System: CA certificate can be revoked
Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with permissions to revoke end entity certificates to revoke the Certificate Authority (CA) certificate.
No detection rules found.
No public exploits indexed.
http://osvdb.org/84098http://rhn.redhat.com/errata/RHSA-2012-1103.htmlhttp://secunia.com/advisories/50013http://www.securityfocus.com/bid/54608http://www.securitytracker.com/id?1027284https://bugzilla.redhat.com/show_bug.cgi?id=836268https://exchange.xforce.ibmcloud.com/vulnerabilities/77102https://fedorahosted.org/pki/changeset/2430http://osvdb.org/84098http://rhn.redhat.com/errata/RHSA-2012-1103.htmlhttp://secunia.com/advisories/50013http://www.securityfocus.com/bid/54608http://www.securitytracker.com/id?1027284https://bugzilla.redhat.com/show_bug.cgi?id=836268https://exchange.xforce.ibmcloud.com/vulnerabilities/77102https://fedorahosted.org/pki/changeset/2430
2012-08-13
Published