Published: 26/07/2018 Updated: 12/02/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package prior to 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux desktop 7.0
redhat enterprise linux workstation 7.0
redhat enterprise linux server 7.0
dogtagpki dogtagpki

Synopsis Moderate: pki-core security update Type/Severity Security Advisory: Moderate Topic An update for pki-core is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, ...

Debian Bug report logs - #869261 CVE-2017-7537 Package: src:dogtag-pki; Maintainer for src:dogtag-pki is Debian FreeIPA Team <pkg-freeipa-devel@alioth-listsdebiannet>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Sat, 22 Jul 2017 06:45:02 UTC Severity: grave Tags: security Found in version dogtag-pki/03 ...

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates ...

CWE-592 https://github.com/dogtagpki/pki/commit/876d13c6d20e7e1235b9 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7537 https://access.redhat.com/errata/RHSA-2017:2335 https://access.redhat.com/errata/RHSA-2017:2335 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2017-7537

CVE-2017-7537

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect