CVE-2010-3868 PUBLISHED CVSS 5.800000190734863 MEDIUM

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.

EPSS 0.28% · 51.0th percentile

Risk Scores

CVSS v2.0
5.800000190734863
EPSS Score
0.28%
51.0th percentile

Affected Products

VendorProductVersions
redhatcertificate_system7.3, 8
redhatdogtag_certificate_system
n/an/an/a

Timeline

References

Open in Interactive Console →