Vulnerability Details : CVE-2006-4991
RSA Keon Certificate Authority (KeonCA) Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority (CA) activities by modifying CA auditor logs without detection by (1) modifying or deleting a <LOG BLOCK> and its signature from the XML log in a way that is not detected by the integrity check function that operates on the entire pool, or (2) modifying entries in the live log file, which is only signed during rotation.
Exploit prediction scoring system (EPSS) score for CVE-2006-4991
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-4991
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
3.6
|
LOW | AV:L/AC:L/Au:N/C:P/I:P/A:N |
3.9
|
4.9
|
NIST |
References for CVE-2006-4991
-
http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049592.html
Vendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/29065
-
http://www.securityfocus.com/archive/1/446742/100/0/threaded
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/29068
-
http://www.securityfocus.com/bid/20136
Products affected by CVE-2006-4991
- cpe:2.3:a:rsa:keon_certificate_authority_manager:6.6:*:*:*:*:*:*:*
- cpe:2.3:a:rsa:keon_certificate_authority_manager:6.5.1:*:*:*:*:*:*:*