- Description
- agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.
- Source
- secalert@redhat.com
- NVD status
- Deferred
CVSS 2.0
- Type
- Primary
- Base score
- 6.5
- Impact score
- 6.4
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:P/A:P
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:certificate_system:7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2654E6A-190C-4D5C-ABC0-89011DD8E293"
},
{
"criteria": "cpe:2.3:a:redhat:dogtag_certificate_system:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06D606EF-447B-42C5-ADBE-14515257262B"
}
],
"operator": "OR"
}
]
}
]