Redhat : Security Vulnerabilities, CVEs, Published In 2010 (Gain Privilege) CVSS score >= 2
Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.
Max CVSS
5.8
EPSS Score
0.60%
Published
2010-11-17
Updated
2010-11-18
The default configuration of Luci 0.22.4 and earlier in Red Hat Conga uses "[INSERT SECRET HERE]" as its secret key for cookies, which makes it easier for remote attackers to bypass repoze.who authentication via a forged ticket cookie.
Max CVSS
6.4
EPSS Score
0.57%
Published
2010-11-06
Updated
2023-02-13
2 vulnerabilities found